FlamingFingers (OP)
|
|
March 31, 2017, 01:21:57 AM |
|
I have a weird problem that happened to me 4 times so far (and it still continues to happen) – every time I try to copy–paste my bitcoin address, either from the forum, or onto, I end up getting another address, which has the same 3 initial characters that my bitcoin address has. The weird about this is that it didn't happen until I started using Coinbase online wallet, and it happens only on this forum. (I used to copy–paste my desktop wallet address without any problem.)
So does anyone have a rational explanation for this, if not a solution?
|
|
|
|
Lutpin
Copper Member
Legendary
Offline
Activity: 1904
Merit: 1874
Goodbye, Z.
|
|
March 31, 2017, 01:24:06 AM |
|
Sounds like your device is infected with malware. Run a virus scan.
Have a look at this: https://bitcointalk.org/index.php?topic=1842977.msg18340725#msg18340725
|
| | | | ███████ ██████████ ██████████ ██████████ ██████████ ██████████ ██████████ ██████████ ██████████ ██████████ ██████████ ██████████ ███████ | | | |
▄████████████████████████████████████████████████████████████▄ ██ ▄▄▄▄▄▄ ██ ██ ██████ ▄██████████▄ ████████████████████▀ ██ ████████ ▄████▀ ▀████▄ ████▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ ██ ████ ████ ████▀ ▀██▀ ████ ██ ████ ████ ▄███▀ ████ ██ ████ ████ ███▀ ████▄▄▄▄▄▄▄▄▄▄ ██ ████ ████ ███ ██████████████ ██ ████ ████ ███▄ ████▀▀▀▀▀▀▀▀▀▀ ██ ████████████████████ ▀████ ████ ██ ██████████████████████ ▀████▄ ▄██▄ ████ ██ ████ ████ ▀████▄ ▄████▀ ████▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄ ██ ████ ████ ▀██████████▀ ████████████████████▄ ██ ▀▀▀▀▀▀ ██ ▀█████████████████████████████████████████████████████████████████████▀ | | |
|
|
|
ImHash
|
|
March 31, 2017, 01:36:32 AM |
|
Did you download anything from coinbase or what? can you try it while offline with a new address and see if the change still happens? If the change didn't happen then you could defeat the virus/hijacker by always copy paste addresses when not connected to internet.
|
|
|
|
bitkilo
Legendary
Offline
Activity: 1638
Merit: 1010
https://www.bitcoin.com/
|
|
March 31, 2017, 01:43:47 AM |
|
I am starting to see more people asking this question all over the net, the problem seem to be getting big now. Another thread about the bug/virus here: https://bitcointalk.org/index.php?topic=1841658.msg18324976#msg18324976Ps, this thread doesn't really belong in Meta, maybe bitcoin discussion or tech help.
|
Not a paid signature, just added to promote Bitcoin.com
|
|
|
AmoreJaz
Legendary
Offline
Activity: 3318
Merit: 1105
Leading Crypto Sports Betting & Casino Platform
|
|
March 31, 2017, 09:23:50 AM |
|
THIS THREAD AND HALF OF ALL THE OTHER FORUMS HAVE THE SAME DISCUSSION ! this is a very very old script kiddy hack , it is attached to many different *.jpg and *.png files "hidden on the inside of them! all you have to do is look at a pic on the net and it launches because you gave permission for it to launch by looking at that pic and so on and so fourth!!!! it is actually pretty well made at times, i have seen it well self propagating
HINT= THIS DOES NOT HAPPEN ON A LINUX MACHINE!!!!
|
..Stake.com.. | | | ▄████████████████████████████████████▄ ██ ▄▄▄▄▄▄▄▄▄▄ ▄▄▄▄▄▄▄▄▄▄ ██ ▄████▄ ██ ▀▀▀▀▀▀▀▀▀▀ ██████████ ▀▀▀▀▀▀▀▀▀▀ ██ ██████ ██ ██████████ ██ ██ ██████████ ██ ▀██▀ ██ ██ ██ ██████ ██ ██ ██ ██ ██ ██ ██████ ██ █████ ███ ██████ ██ ████▄ ██ ██ █████ ███ ████ ████ █████ ███ ████████ ██ ████ ████ ██████████ ████ ████ ████▀ ██ ██████████ ▄▄▄▄▄▄▄▄▄▄ ██████████ ██ ██ ▀▀▀▀▀▀▀▀▀▀ ██ ▀█████████▀ ▄████████████▄ ▀█████████▀ ▄▄▄▄▄▄▄▄▄▄▄▄███ ██ ██ ███▄▄▄▄▄▄▄▄▄▄▄▄ ██████████████████████████████████████████ | | | | | | ▄▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▄ █ ▄▀▄ █▀▀█▀▄▄ █ █▀█ █ ▐ ▐▌ █ ▄██▄ █ ▌ █ █ ▄██████▄ █ ▌ ▐▌ █ ██████████ █ ▐ █ █ ▐██████████▌ █ ▐ ▐▌ █ ▀▀██████▀▀ █ ▌ █ █ ▄▄▄██▄▄▄ █ ▌▐▌ █ █▐ █ █ █▐▐▌ █ █▐█ ▀▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▀█ | | | | | | ▄▄█████████▄▄ ▄██▀▀▀▀█████▀▀▀▀██▄ ▄█▀ ▐█▌ ▀█▄ ██ ▐█▌ ██ ████▄ ▄█████▄ ▄████ ████████▄███████████▄████████ ███▀ █████████████ ▀███ ██ ███████████ ██ ▀█▄ █████████ ▄█▀ ▀█▄ ▄██▀▀▀▀▀▀▀██▄ ▄▄▄█▀ ▀███████ ███████▀ ▀█████▄ ▄█████▀ ▀▀▀███▄▄▄███▀▀▀ | | | ..PLAY NOW.. |
|
|
|
Qartada
|
|
March 31, 2017, 09:26:45 AM |
|
Nothing to do with Coinbase, they're legit and you presumably haven't downloaded anything from there. This is pretty basic malware though, your computer should be safe as long as you don't send it to the address but run some virus scans and send from an uninfected machine in the future (since you're using Coinbase I assume your Bitcoins can be used from any device).
|
|
|
|
Velkro
Legendary
Offline
Activity: 2296
Merit: 1014
|
|
March 31, 2017, 11:45:33 AM |
|
Its infected with virus that changes your adres after you copy it and before you paste it. Reinstall your system entirely, don't risk infection won't be removed completly.
|
|
|
|
xIIImaL
Legendary
Offline
Activity: 1372
Merit: 1005
|
|
March 31, 2017, 05:13:45 PM |
|
I know the that we can consitently change our btc address for being anonymous everywhere. I am user of coinbase from the past 1 year. I didn't face these kind of issue. @lutpin. I checked in the reference thread its stating like a Trojan malware been attacked. Is there any possibility find that kind of malware, if its attacked our PCs.
|
|
|
|
Cereberus
Legendary
Offline
Activity: 910
Merit: 1000
|
|
March 31, 2017, 05:49:04 PM |
|
I know the that we can consitently change our btc address for being anonymous everywhere. I am user of coinbase from the past 1 year. I didn't face these kind of issue. @lutpin. I checked in the reference thread its stating like a Trojan malware been attacked. Is there any possibility find that kind of malware, if its attacked our PCs. In my opinion Avira PRO Antivirus or Avira Internet Security Suite does a pretty good job at removing viruses much more annoying than this one. Run a scan with this Antivirus and 99% of the times it will solve your virus/spyware/keylogger problems. Even the free version is pretty solid. I used to use ESET and many other Antiviruses ,since I switched here to Avira not a single issue for me even when I am on Windows, as usually I am on Linux most of the time.
|
|
|
|
bigsoft
Member
Offline
Activity: 70
Merit: 10
|
|
March 31, 2017, 10:48:44 PM |
|
We learn everyday oo. I never imagine this kind of thing.
|
|
|
|
xIIImaL
Legendary
Offline
Activity: 1372
Merit: 1005
|
|
April 01, 2017, 03:09:46 PM |
|
I know the that we can consitently change our btc address for being anonymous everywhere. I am user of coinbase from the past 1 year. I didn't face these kind of issue. @lutpin. I checked in the reference thread its stating like a Trojan malware been attacked. Is there any possibility find that kind of malware, if its attacked our PCs. In my opinion Avira PRO Antivirus or Avira Internet Security Suite does a pretty good job at removing viruses much more annoying than this one. Run a scan with this Antivirus and 99% of the times it will solve your virus/spyware/keylogger problems. Even the free version is pretty solid. I used to use ESET and many other Antiviruses ,since I switched here to Avira not a single issue for me even when I am on Windows, as usually I am on Linux most of the time. Buddy, I am techy, I have known these softwares. Avira not a big rated software in global rating. You could use the Norton or Kaspersky for the better security. Here I want to How we know any malware attacked the desktop wallet like electrum or multibit. Please don't say the malfunction in PC. It's common for other software.
|
|
|
|
FAKE_GENERATOR
Newbie
Offline
Activity: 48
Merit: 0
|
|
April 01, 2017, 07:42:27 PM |
|
Can these really be installed from jpeg or other non exe file?
|
|
|
|
Voiceeeeee
Newbie
Offline
Activity: 8
Merit: 0
|
|
April 08, 2017, 10:34:36 AM |
|
Can these really be installed from jpeg or other non exe file?
Well, the exe can be binded to another file.
|
|
|
|
FlamingFingers (OP)
|
|
April 08, 2017, 04:00:58 PM |
|
Thanks for the suggestions, everyone. I have managed to solve this using eset antivirus software, and it seems to have wiped out the Malware/Trojan. Everything is good now. Can these really be installed from jpeg or other non exe file?
I don't think so. Most of the Malwares/Trojans come from .exe files. The one that was infected was an .exe file that I don't know where it came from.
|
|
|
|
|