Bitcoin Forum
November 11, 2024, 08:07:10 PM *
News: Latest Bitcoin Core release: 28.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1] 2 »  All
  Print  
Author Topic: My BitCoins Being Hacked?  (Read 1596 times)
BitCoinNewGuy (OP)
Member
**
Offline Offline

Activity: 84
Merit: 10

'That Guy'


View Profile
May 29, 2013, 02:55:31 AM
 #1

Norton AntiVirus is "Blocking a hacking/malicious website intrusion attempt" whenever opening BitCoin-QT.

Info:
Network traffic from checkip.dyndns.org/ matches the signature of a known attack.  The attack was resulted from \DEVICE\HARDDISKVOLUME1\PROGRAM FILES\BITCOIN\BITCOIN-QT.EXE.

I have moved my 1.766 BitCoins to another location....is this a virus something to worry about?


Please only reply with facts and not speculation of what this might be.


Update:
Scanned Computer [FULL SCAN] and it was clean.
Each time BitCoin-Qt is opened, the message pops up still!
Caesium
Hero Member
*****
Offline Offline

Activity: 546
Merit: 500


View Profile
May 29, 2013, 03:01:40 AM
 #2

Oh dear, Norton Antivirus.

This is perfectly normal behaviour from the bitcoin client. See https://github.com/bitcoin/bitcoin/blob/master/src/net.cpp#L340 for where it is invoked.

Just Norton spreading FUD as usual. Do yourself a favour and nuke it :p

Tired of annoying signature ads? Ad block for signatures
BitCoinNewGuy (OP)
Member
**
Offline Offline

Activity: 84
Merit: 10

'That Guy'


View Profile
May 29, 2013, 03:23:19 AM
 #3

Ok, I turned Norton AntiVirus off, but now something "Trojan.Zbot" has been 'detected' and 'not blocked'.

Is Trojan.Zbot part of BitCoin too? I found the file and opened it and let it run, don't wanna lose my BitCoins!!  Smiley
kodo
Newbie
*
Offline Offline

Activity: 42
Merit: 0



View Profile
May 29, 2013, 03:29:16 AM
 #4

 First Step:Delete Norton Antivirus
Second Step: Be thankful you deleted Nortan Anti Virus!
Blazr
Hero Member
*****
Offline Offline

Activity: 882
Merit: 1006



View Profile
May 29, 2013, 03:33:20 AM
 #5

Trojan.Zbot

http://www.f-secure.com/v-descs/trojan-spy_w32_zbot.shtml

If you have been infected with this then I would be very wary to access any banking/bitcoin related stuff on that machine until you reformat and reinstall.

What site did you download your copy of Bitcoin-QT from?

notlist3d
Legendary
*
Offline Offline

Activity: 1456
Merit: 1000



View Profile
May 29, 2013, 03:36:08 AM
 #6

Norton is good for one thing.... rebates lol.  But on a side note +1 for you being proactive and not trusting just any program.

Try another anti-virus.  Some can be real pains to get rid of on malware.  Is it first time you have gotten this warning, or is it happening with other programs?
01BTC10
VIP
Hero Member
*
Offline Offline

Activity: 756
Merit: 503



View Profile
May 29, 2013, 03:36:55 AM
 #7

Ok, I turned Norton AntiVirus off, but now something "Trojan.Zbot" has been 'detected' and 'not blocked'.

Is Trojan.Zbot part of BitCoin too? I found the file and opened it and let it run, don't wanna lose my BitCoins!!  Smiley

Not part of Bitcoin.

http://en.wikipedia.org/wiki/Zeus_(Trojan_horse)
kodo
Newbie
*
Offline Offline

Activity: 42
Merit: 0



View Profile
May 29, 2013, 03:41:22 AM
 #8

looks like you downloaded a virus?
notlist3d
Legendary
*
Offline Offline

Activity: 1456
Merit: 1000



View Profile
May 29, 2013, 03:50:40 AM
 #9

Also try scanning with multiple programs.  One malwarebytes, avg both free.   I would reboot and try again.  Some can be a pain to get rid of.
Kaepora
Newbie
*
Offline Offline

Activity: 42
Merit: 0



View Profile
May 29, 2013, 03:58:16 AM
 #10

Norton AntiVirus is "Blocking a hacking/malicious website intrusion attempt" whenever opening BitCoin-QT.

Info:
Network traffic from checkip.dyndns.org/ matches the signature of a known attack.  The attack was resulted from \DEVICE\HARDDISKVOLUME1\PROGRAM FILES\BITCOIN\BITCOIN-QT.EXE.

I have moved my 1.766 BitCoins to another location....is this a virus something to worry about?


Please only reply with facts and not speculation of what this might be.


Update:
Scanned Computer [FULL SCAN] and it was clean.
Each time BitCoin-Qt is opened, the message pops up still!


get Microsoft security essentials, update scan then download malware bytes update and do a full scan
Mataman
Newbie
*
Offline Offline

Activity: 14
Merit: 0



View Profile
May 29, 2013, 04:14:05 AM
 #11

Just delete Norton, worth your while, less pop ups. If you really want an antivirus Avira Free is my favorite choice.
kodo
Newbie
*
Offline Offline

Activity: 42
Merit: 0



View Profile
May 29, 2013, 04:24:50 AM
 #12

Nortan antivirus sucks though, really just delete it.
lontivero
Full Member
***
Offline Offline

Activity: 164
Merit: 128

Amazing times are coming


View Profile
May 29, 2013, 04:44:20 AM
 #13

are you sure you´ve downloaded the client from the correct site?
Kaepora
Newbie
*
Offline Offline

Activity: 42
Merit: 0



View Profile
May 29, 2013, 04:46:46 AM
 #14

Norton AntiVirus is "Blocking a hacking/malicious website intrusion attempt" whenever opening BitCoin-QT.

Info:
Network traffic from checkip.dyndns.org/ matches the signature of a known attack.  The attack was resulted from \DEVICE\HARDDISKVOLUME1\PROGRAM FILES\BITCOIN\BITCOIN-QT.EXE.

I have moved my 1.766 BitCoins to another location....is this a virus something to worry about?


Please only reply with facts and not speculation of what this might be.


Update:
Scanned Computer [FULL SCAN] and it was clean.
Each time BitCoin-Qt is opened, the message pops up still!


Take off Norton it always gives fake alerts just because some programs behave similar to viruses and trojans, download Microsoft Security Essentials or Avast.
flavius
Full Member
***
Offline Offline

Activity: 154
Merit: 100


welcome to riches


View Profile
May 29, 2013, 04:51:34 AM
 #15

using norton what are you like 50?

Quote
crime generates tenfold more money then real businesses do in bitcoin. the fact you cant accept this just makes you a kike

A reply of yours, quoted below, was deleted by the starter of a self-moderated topic. There are no rules of self-moderation, so this deletion cannot be appealed. Do not continue posting in this topic if the topic-starter has requested that you leave.

You can create a new topic if you are unsatisfied with this one. If the topic-starter is scamming, post about it in Scam Accusations.
coin_toss
Member
**
Offline Offline

Activity: 117
Merit: 10


View Profile
May 29, 2013, 06:26:38 AM
 #16

Sounds like you got a virus there with trojan.zbot. Best not to run bitcoin on that comp until it has been thoroughly cleaned by someone who knows what they are doing, or perhaps even format the comp and clean install.
BitCoinNewGuy (OP)
Member
**
Offline Offline

Activity: 84
Merit: 10

'That Guy'


View Profile
May 29, 2013, 11:00:18 AM
 #17

Quote
using norton what are you like 50?

54

Quote
http://www.f-secure.com/v-descs/trojan-spy_w32_zbot.shtml

If you have been infected with this then I would be very wary to access any banking/bitcoin related stuff on that machine until you reformat and reinstall.

shit.  Undecided
Rampion
Legendary
*
Offline Offline

Activity: 1148
Merit: 1018


View Profile
May 29, 2013, 11:03:58 AM
 #18

Just get rid of Windoze, it's a piece of crap.

mboot
Newbie
*
Offline Offline

Activity: 154
Merit: 0


View Profile
May 29, 2013, 11:04:14 AM
 #19

Norton is going to eat your coins  Grin
BitcoinBoss
Sr. Member
****
Offline Offline

Activity: 404
Merit: 250



View Profile WWW
May 29, 2013, 10:10:38 PM
 #20

I got the same thing from Norton today, both from running Bitcoin QT and Litecoin QT.

Network traffic from checkip.dyndns.org matches the signature of a known attack.

I've etablished from this thread that there is no threat, but why is this occuring? I have been running Norton alongside QT for over a month and this only occured for the first time today.

FREE BITCOIN ! ---> FreeBitco.in (Faucet + Multiplier) <--- FREE BITCOIN !
Pages: [1] 2 »  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!