Yacoin Client scam

[obermensch]

UPDATE
The Client have been tested, and nothing wrong with that.
Look like some bastards started the panic, hoping to get some cheap yacoins from panic sales

but please be aware that software that not coming from Yacoin.org like miners, and software people have compiled them self, can indeed have bitcoin stealer, and other nasty stuff.



Hi, i am the admin at Yacointalk.com

i posted this now http://yacointalk.com/index.php/topic,26.0.html

So, what we need to state here

is it the client that steal, or is it the windows miner? or something else.
i have just sent mail to the Yacoin creator, to state if he compiled that client himself, or someone else did it.

please don't spam this tread over.

and please! post some proof of the stealing, so we can state that, this is not a campaign to shoot the Yacoin to the ground in value.

[1715361081]

1715361081

[1715361081]

1715361081

[hdclover]

Hi, i am the admin at Yacointalk.com

i posted this now http://yacointalk.com/index.php/topic,26.0.html

So, what we need to state here

is it the client that steal, or is it the windows miner? or something else.
i have just sent mail to the Yacoin creator, to state if he compiled that client himself, or someone else did it.

please don't spam this tread over.

and please! post some proof of the stealing, so we can state that, this is not a campaign to shoot the Yacoin to the ground in value.

yes its scam hope everybody uninstall it for their own sake. it could steal other sensitive data.

[hdclover]

Warning possible keylogger or sensitive data extraction please reinstall your OS if you have already lost some bitcoins

[obermensch]

Hi, i am the admin at Yacointalk.com

i posted this now http://yacointalk.com/index.php/topic,26.0.html

So, what we need to state here

is it the client that steal, or is it the windows miner? or something else.
i have just sent mail to the Yacoin creator, to state if he compiled that client himself, or someone else did it.

please don't spam this tread over.

and please! post some proof of the stealing, so we can state that, this is not a campaign to shoot the Yacoin to the ground in value.

yes its scam hope everybody uninstall it for their own sake. it could steal other sensitive data.

i don't think the Yacoin funder is behind this. i think someone compiled the windows client, and added a stealer. for i don't find anything fishy in the Linux client. so don't state that to fast =)

[Yurizhai]

This has a 95% chance of being bullshit, for more info : https://bitcointalk.org/index.php?topic=202078.0

[Rannasha]

Hi, i am the admin at Yacointalk.com

i posted this now http://yacointalk.com/index.php/topic,26.0.html

So, what we need to state here

is it the client that steal, or is it the windows miner? or something else.
i have just sent mail to the Yacoin creator, to state if he compiled that client himself, or someone else did it.

please don't spam this tread over.

and please! post some proof of the stealing, so we can state that, this is not a campaign to shoot the Yacoin to the ground in value.

Right now there is zero proof of something actually being wrong. Some people are working on finding out if some of the programs are acting fishy.

Until then, it's probably better to not spam panic-posts all over, like Mr RoyalCoin supporter (hdclover) above me has been doing. It just adds to the FUD.

[skytaper]

Seems to be true.. My coins just gone... I have to do something! Shocked. I just have nothing to say. I was rich, now I have nothing.
 I took my client from yacoin.org

 

[obermensch]

Just installed Yacoin on one of my laptops, and bitcoin wallet, and transferes 0.01 btc, to see if they disapear. will post update

[Fernandez]

I think th eclient is safe. It probably is one of those modified miners.

Maybe this one - can somebody check it? https://bitcointalk.org/index.php?topic=200147.msg2095639#msg2095639

[obermensch]

I think th eclient is safe. It probably is one of those modified miners.

Maybe this one - can somebody check it? https://bitcointalk.org/index.php?topic=200147.msg2095639#msg2095639

Yes that's my theory to. for i think there is a stealer out there, since it's alot of people posting and claim there btc i stolen.

but i don't think the Yacoin funder is behind it.

[shaal]

if i's the minerd tool that has the trojan it in, it could come from this here, This is where the first minerd client was made for yacoin https://bitcointalk.org/index.php?topic=199517.0;all

[obermensch]

Warning possible keylogger or sensitive data extraction please reinstall your OS if you have already lost some bitcoins

Can you please provide some kind of proof of the stealing =)?

maby som screenshots of the client, transaction, and compare it to blockcain  

[obermensch]

if i's the minerd tool that has the trojan it in, it could come from this here, This is where the first minerd client was made for yacoin https://bitcointalk.org/index.php?topic=199517.0;all

hmm would't the reporting of stealing begun earlier then?

[Fernandez]

I think th eclient is safe. It probably is one of those modified miners.

Maybe this one - can somebody check it? https://bitcointalk.org/index.php?topic=200147.msg2095639#msg2095639

The proof that one of those crying about stolen wallet indeed downloaded and run miner in question:

https://bitcointalk.org/index.php?topic=200147.msg2096546#msg2096546

Damm - I am running that too. The stealer is welcome to my Bitcoin wallet as  I transferred out all of them.

Is it just Bitcoin wallet it is after? My FTCs are fine. Don't fancy installing the OS.

[obermensch]

i done some testing, and the client seems fine, just updated the post on yacointalk.com.

still going to test all the miners to see.

but for now, this seems like a campain to lover the price of yac, to earn some cash from panic sales =)
so look after people buying large amount of yac now, and you will probably find the man/woman behind this scare tactic.

[cheapbit]

(the win32 binary downloaded soon after release)

tested under a VM for ~30minutes.
no read operation toward bitcoin wallet yet.
and no dns request to the suffix yet.

although the motivation to release yacoin is still highly suspicious.

[nesic1]

is client needs to be running or it just need to be run once, and infect the system?

[jomay]

Warning possible keylogger or sensitive data extraction please reinstall your OS if you have already lost some bitcoins

I've dealt with hdclover on the 9.5.13 selling him YACs. He was desperate to get more.

Anyhow I have checked the BTC address he sent my payment from and there is nothing missing. So either hdclover had a different wallet.dat corrupted or did not lose anything.

Anything else, make your own conclusions. And feel free to repost that to the other posts he did.

[techbytes]

Malwarebytes has been blocking a lot of attempted access to my cnc, btc and yac wallets.  This all started happening when I started mining yacoin.  Does this mean my system is infected?  I did a scan and it found two infected files, "cgminer.exe and minerd.exe".  I deleted both but still getting notification about block attempts to my wallets.

Nothing is missing yet from my wallets.  I would hate to reinstall the OS.  Any other apps to remove malware/trojan?





tb

[Vycid]

Malwarebytes has been blocking a lot of attempted access to my cnc, btc and yac wallets.  This all started happening when I started mining yacoin.  Does this mean my system is infected?  I did a scan and it found two infected files, "cgminer.exe and minerd.exe".  I deleted both but still getting notification about block attempts to my wallets.

Nothing is missing yet from my wallets.  I would hate to reinstall the OS.  Any other apps to remove malware/trojan?





tb

Sounds like CPUMiner, as we'd been suspecting. Where'd you download it from?

The only way to be 100% safe after being exposed to malware is a complete drive reformat and OS reinstall. The malware probably isn't that sophisticated, though, so removal is probably sufficient.