Bitcoins stolen - advice needed

[Andya]

Hi,

I am guessing I am screwed but any help you can provide is appreciated. Back in Dec 2013 I was running armory (password encrypted) on my windows & laptop.  As it only had 4gb RAM I couldn't get the blockchain to update so I upgraded to a Win8 machine with 8gb.  After which the RAM requirement had decreased anyway.

After installing armory for the first time I just couldn't get the to work - kept hanging every time it synced and then crashed when entering my password.  After uninstalling and reinstalling a few times and restoring my wallet. All was well.  The password worked.

Just checked today and all 14.38 BTC were stolen on the 6th Jan via 7 transactions, a couple weeks after restoring the wallet.  I have no idea how considering the wallet was encrypted.  This password could not have been bruteforced.

They were stolen from this address and all addresses I had associated with it in the wallet - 17JtGPjxJtpNA2vqSbNAMLjBet2Q4s8Fpx

This has wiped me out and I guess tracing them is not a worthwhile excercise?

Any ideas or advice welcome.  No infections or spyware found.

Much appreciated

[BitCoinDream]

So many stealing complains around 

We need the Bitcoin COP 

[Andya]

Can anyone help with checking the blockchain?  Have they left an easy trail or has the BTC gone on the move?

Thanks

[Andya]

Yep, down around $14,000.   1,000,000 shot but 4.38 BTC to anyone that can help get them back.

So many stealing complains around 

We need the Bitcoin COP 

[Andya]

Out of interest what would someone need to restore the armory wallet.  Would just the primary wallet address and encryption password be sufficient or would they need more? I.e would that HAVE to do this from my PC. 

I have 1 paper backup under lock and key and this hasn't been touched.

[Nikinger]

I tried to follow the blockchain and noticed some of the Bitcoins from the address 17JtGPjxJtpNA2vqSbNAMLjBet2Q4s8Fpx went to 1CAnyj9TfJkNM8Xaf8EygMEhcfBcphtcr3 (14.38 BTC volume), then to 1BKzcoW2VfmWYTCgjjxcJLYRn3Nnfu1U4s (14.3 BTC Input) -> 1Facb8QnikfPUoo8WVFnyai3e1Hcov9y8T (~200.000 BTC volume)

If I google "1Facb8QnikfPUoo8WVFnyai3e1Hcov9y8T", I get: https://bitcointalk.org/index.php?topic=383039.0

I don't know if there's any correlation or useful information meaningful for you, but I tried at least ...

[oxfardk]

So many stealing complains around because there is no serious way to secure it

[Sonny]

Out of interest what would someone need to restore the armory wallet.  Would just the primary wallet address and encryption password be sufficient or would they need more? I.e would that HAVE to do this from my PC.  

I have 1 paper backup under lock and key and this hasn't been touched.

The address is just for someone to send bitcoin to it. It has nothing to do with the hack.
To get your bitcoin, the hackers need your wallet file and also your encryption password.

Apart from the paper backup, do you have any other backup somewhere online (eg. email / dropbox) ?
Or, maybe there is a trojan / keylogger on your computer, and then the hacker takes both your wallet and password.

[Smileyftw]

Can anyone help with checking the blockchain?  Have they left an easy trail or has the BTC gone on the move?

Thanks

you will track the blockchain down and then ?

[bitmiggy]

Too many thefts

[Exther]

So many stealing complains around 

We need the Bitcoin COP 

Uh huh You bet