Weird bitcoin address showing up!

[FlamingFingers]

I have a weird problem that happened to me 4 times so far (and it still continues to happen) – every time I try to copy–paste my bitcoin address, either from the forum, or onto, I end up getting another address, which has the same 3 initial characters that my bitcoin address has. The weird about this is that it didn't happen until I started using Coinbase online wallet, and it happens only on this forum. (I used to copy–paste my desktop wallet address without any problem.)

So does anyone have a rational explanation for this, if not a solution?  

[1715510652]

1715510652

[1715510652]

1715510652

[1715510652]

1715510652

[1715510652]

1715510652

[Lutpin]

Sounds like your device is infected with malware.

Run a virus scan.


Have a look at this:
https://bitcointalk.org/index.php?topic=1842977.msg18340725#msg18340725

[ImHash]

Did you download anything from coinbase or what? can you try it while offline with a new address and see if the change still happens?
If the change didn't happen then you could defeat the virus/hijacker by always copy paste addresses when not connected to internet.

[bitkilo]

I am starting to see more people asking this question all over the net, the problem seem to be getting big now.

Another thread about the bug/virus here: https://bitcointalk.org/index.php?topic=1841658.msg18324976#msg18324976

Ps, this thread doesn't really belong in Meta, maybe bitcoin discussion or tech help.

[AmoreJaz]

THIS THREAD AND HALF OF ALL THE OTHER FORUMS HAVE THE SAME DISCUSSION !
this is a very very old script kiddy hack , it is attached to many different *.jpg and *.png files "hidden on the inside of them!
all you have to do is look at a pic on the net and it launches because you gave permission for it to launch by looking at that pic and so on and so fourth!!!!
it is actually pretty well made at times, i have seen it well self propagating

HINT= THIS DOES NOT HAPPEN ON A LINUX MACHINE!!!!

[Qartada]

Nothing to do with Coinbase, they're legit and you presumably haven't downloaded anything from there.  This is pretty basic malware though, your computer should be safe as long as you don't send it to the address but run some virus scans and send from an uninfected machine in the future (since you're using Coinbase I assume your Bitcoins can be used from any device).

[Velkro]

Sounds like your device is infected with malware.

Run a virus scan.


Have a look at this:
https://bitcointalk.org/index.php?topic=1842977.msg18340725#msg18340725

Its infected with virus that changes your adres after you copy it and before you paste it.
Reinstall your system entirely, don't risk infection won't be removed completly.

[xIIImaL]

Sounds like your device is infected with malware.

Run a virus scan.


Have a look at this:
https://bitcointalk.org/index.php?topic=1842977.msg18340725#msg18340725

I know the that we can consitently change our btc address for being anonymous everywhere. I am user of coinbase from the past 1 year. I didn't face these kind of issue. @lutpin. I checked in the reference thread its stating like a Trojan malware been attacked. Is there any possibility find that kind of malware, if its attacked our PCs.

[Cereberus]

Sounds like your device is infected with malware.

Run a virus scan.


Have a look at this:
https://bitcointalk.org/index.php?topic=1842977.msg18340725#msg18340725

I know the that we can consitently change our btc address for being anonymous everywhere. I am user of coinbase from the past 1 year. I didn't face these kind of issue. @lutpin. I checked in the reference thread its stating like a Trojan malware been attacked. Is there any possibility find that kind of malware, if its attacked our PCs.

In my opinion Avira PRO Antivirus or Avira Internet Security Suite does a pretty good job at removing viruses much more annoying than this one. Run a scan with this Antivirus and 99% of the times it will solve your virus/spyware/keylogger problems. Even the free version is pretty solid. I used to use ESET and many other Antiviruses ,since I switched here to Avira not a single issue for me even when I am on Windows, as usually I am on Linux most of the time.

[bigsoft]

We learn everyday oo. I never imagine this kind of thing. 

[xIIImaL]

Sounds like your device is infected with malware.

Run a virus scan.


Have a look at this:
https://bitcointalk.org/index.php?topic=1842977.msg18340725#msg18340725

I know the that we can consitently change our btc address for being anonymous everywhere. I am user of coinbase from the past 1 year. I didn't face these kind of issue. @lutpin. I checked in the reference thread its stating like a Trojan malware been attacked. Is there any possibility find that kind of malware, if its attacked our PCs.

In my opinion Avira PRO Antivirus or Avira Internet Security Suite does a pretty good job at removing viruses much more annoying than this one. Run a scan with this Antivirus and 99% of the times it will solve your virus/spyware/keylogger problems. Even the free version is pretty solid. I used to use ESET and many other Antiviruses ,since I switched here to Avira not a single issue for me even when I am on Windows, as usually I am on Linux most of the time.

Buddy, I am techy, I have known these softwares. Avira not a big rated software in global rating. You could use the Norton or Kaspersky for the better security. Here I want to How we know any malware attacked the desktop wallet like electrum or multibit. Please don't say the malfunction in PC. It's common for other software.

[FAKE_GENERATOR]

Can these really be installed from jpeg or other non exe file?

[Voiceeeeee]

Can these really be installed from jpeg or other non exe file?

Well, the exe can be binded to another file.

[FlamingFingers]

Thanks for the suggestions, everyone. I have managed to solve this using eset antivirus software, and it seems to have wiped out the Malware/Trojan. Everything is good now.

Can these really be installed from jpeg or other non exe file?

I don't think so. Most of the Malwares/Trojans come from .exe files. The one that was infected was an .exe file that I don't know where it came from.