Bitcoin Forum
June 21, 2024, 08:06:42 AM *
News: Voting for pizza day contest
 
   Home   Help Search Login Register More  
Pages: « 1 2 [3] 4 5 »  All
  Print  
Author Topic: ALERT! sgminerwindows.com Stealing Bitcoins!  (Read 13568 times)
omgbossis21
Sr. Member
****
Offline Offline

Activity: 336
Merit: 250


View Profile
August 04, 2014, 08:26:31 AM
 #41

I agree the title should be changed.  I haven't had time to review the coding source code but I definitely wouldn't trust it for the time being.  It needs to be compiled and decompiled, updated and decompiled again. 
sammir (OP)
Member
**
Offline Offline

Activity: 72
Merit: 10



View Profile
August 04, 2014, 08:45:47 AM
Last edit: August 04, 2014, 10:59:18 AM by sammir
 #42

Since this is NOT blackcoinpools fault, can we get OP to CHANGE the title of this thread please? I'm more than happy to reimburse if it wasnt done already.

would be great get a refund really need those coins, i think its fine to change the title so people not confuse with the pool.


1HwERQLFH4wxHiikQkbP899YEhhB7tFHN
sammir (OP)
Member
**
Offline Offline

Activity: 72
Merit: 10



View Profile
August 04, 2014, 11:00:24 AM
 #43

thanks i really appreciate your gesture of goodwill

1HwERQLFH4wxHiikQkbP899YEhhB7tFHN
Piotrsama
Sr. Member
****
Offline Offline

Activity: 407
Merit: 250



View Profile
August 04, 2014, 11:56:30 AM
 #44

thanks i really appreciate your gesture of goodwill
Create a new wallet.dat, encrypt it and transfer all your funds there, so this doesn't happen again.
GamersBitcoin
Newbie
*
Offline Offline

Activity: 16
Merit: 0


View Profile
August 04, 2014, 12:31:37 PM
 #45

change all your password . investment . bank . data . account . just  worry someone in your pc and trying to set keylogg hidden with fud . full undetectable virus .
K1773R
Legendary
*
Offline Offline

Activity: 1792
Merit: 1008


/dev/null


View Profile
August 04, 2014, 06:20:10 PM
 #46

must be hard to only being able to download binaries (*.EXE) and having to trust them Wink

why do you cry about stolen/lost coins by viruses/fakes if you do this and if you use winblows in combination? after all its your fault.

[GPG Public Key]
BTC/DVC/TRC/FRC: 1K1773RbXRZVRQSSXe9N6N2MUFERvrdu6y ANC/XPM AK1773RTmRKtvbKBCrUu95UQg5iegrqyeA NMC: NK1773Rzv8b4ugmCgX789PbjewA9fL9Dy1 LTC: LKi773RBuPepQH8E6Zb1ponoCvgbU7hHmd EMC: EK1773RxUes1HX1YAGMZ1xVYBBRUCqfDoF BQC: bK1773R1APJz4yTgRkmdKQhjhiMyQpJgfN
dekodoge
Full Member
***
Offline Offline

Activity: 168
Merit: 100


View Profile
August 04, 2014, 06:48:44 PM
 #47

K1773R how long did it take for you to become a prize cunt?
sammir (OP)
Member
**
Offline Offline

Activity: 72
Merit: 10



View Profile
August 04, 2014, 07:26:37 PM
Last edit: August 04, 2014, 09:34:47 PM by sammir
 #48

must be hard to only being able to download binaries (*.EXE) and having to trust them Wink

why do you cry about stolen/lost coins by viruses/fakes if you do this and if you use winblows in combination? after all its your fault.

maybe because i just trust in localbitcoins? and blackcoinpool? who is redirect to a virus?

btw still i dont recive nothing guys

1HwERQLFH4wxHiikQkbP899YEhhB7tFHN
sammir (OP)
Member
**
Offline Offline

Activity: 72
Merit: 10



View Profile
August 05, 2014, 04:22:28 AM
 #49

Since this is NOT blackcoinpools fault, can we get OP to CHANGE the title of this thread please? I'm more than happy to reimburse if it wasnt done already.

i send you some messages without responde, i will change the title when i get my coins backs.
after all i was infected through blackcoinpool i hope you guys take the right decision reimburse my coins.


1HwERQLFH4wxHiikQkbP899YEhhB7tFHN
dekodoge
Full Member
***
Offline Offline

Activity: 168
Merit: 100


View Profile
August 05, 2014, 08:58:52 AM
 #50

Sammir, always apply a password to encrypt your hot wallets.
Fortify
Legendary
*
Offline Offline

Activity: 2702
Merit: 1192



View Profile
August 05, 2014, 10:06:32 AM
 #51

Since this is NOT blackcoinpools fault, can we get OP to CHANGE the title of this thread please? I'm more than happy to reimburse if it wasnt done already.

i send you some messages without responde, i will change the title when i get my coins backs.
after all i was infected through blackcoinpool i hope you guys take the right decision reimburse my coins.



Google can send you to websites with virus links, is that Google's fault? No. They may recommend the service, the service may even have worked perfectly legit until a week ago, but you should still have done more research before acting so blindly. Anyone who has been using bitcoins longer than a week knows not to download ANYTHING which could take your wallets.

R


▀▀▀▀▀▀▀██████▄▄
████████████████
▀▀▀▀█████▀▀▀█████
████████▌███▐████
▄▄▄▄█████▄▄▄█████
████████████████
▄▄▄▄▄▄▄██████▀▀
LLBIT|
4,000+ GAMES
███████████████████
██████████▀▄▀▀▀████
████████▀▄▀██░░░███
██████▀▄███▄▀█▄▄▄██
███▀▀▀▀▀▀█▀▀▀▀▀▀███
██░░░░░░░░█░░░░░░██
██▄░░░░░░░█░░░░░▄██
███▄░░░░▄█▄▄▄▄▄████
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
█████████
▀████████
░░▀██████
░░░░▀████
░░░░░░███
▄░░░░░███
▀█▄▄▄████
░░▀▀█████
▀▀▀▀▀▀▀▀▀
█████████
░░░▀▀████
██▄▄▀░███
█░░█▄░░██
░████▀▀██
█░░█▀░░██
██▀▀▄░███
░░░▄▄████
▀▀▀▀▀▀▀▀▀
|
██░░░░░░░░░░░░░░░░░░░░░░██
▀█▄░▄▄░░░░░░░░░░░░▄▄░▄█▀
▄▄███░░░░░░░░░░░░░░███▄▄
▀░▀▄▀▄░░░░░▄▄░░░░░▄▀▄▀░▀
▄▄▄▄▄▀▀▄▄▀▀▄▄▄▄▄
█░▄▄▄██████▄▄▄░█
█░▀▀████████▀▀░█
█░█▀▄▄▄▄▄▄▄▄██░█
█░█▀████████░█
█░█░██████░█
▀▄▀▄███▀▄▀
▄▀▄
▀▄▄▄▄▀▄▀▄
██▀░░░░░░░░▀██
||.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
░▀▄░▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄░▄▀
███▀▄▀█████████████████▀▄▀
█████▀▄░▄▄▄▄▄███░▄▄▄▄▄▄▀
███████▀▄▀██████░█▄▄▄▄▄▄▄▄
█████████▀▄▄░███▄▄▄▄▄▄░▄▀
███████████░███████▀▄▀
███████████░██▀▄▄▄▄▀
███████████░▀▄▀
████████████▄▀
███████████
▄▄███████▄▄
▄████▀▀▀▀▀▀▀████▄
▄███▀▄▄███████▄▄▀███▄
▄██▀▄█▀▀▀█████▀▀▀█▄▀██▄
▄██▄██████▀████░███▄██▄
███░████████▀██░████░███
███░████░█▄████▀░████░███
███░████░███▄████████░███
▀██▄▀███░█████▄█████▀▄██▀
▀██▄▀█▄▄▄██████▄██▀▄██▀
▀███▄▀▀███████▀▀▄███▀
▀████▄▄▄▄▄▄▄████▀
▀▀███████▀▀
OFFICIAL PARTNERSHIP
FAZE CLAN
SSC NAPOLI
|
Piotrsama
Sr. Member
****
Offline Offline

Activity: 407
Merit: 250



View Profile
August 05, 2014, 10:45:10 AM
 #52

Confirmed

We're gathering all the necessary information and evidence right now.
Suspect that the person compiling binaries for SGMiner (www.sgminerwindows.com) was trying to pull a fast one.

Interested to know what you gathered.

And BTW, what program are you using to reserve engineer the miners and get such a clean code?
dekodoge
Full Member
***
Offline Offline

Activity: 168
Merit: 100


View Profile
August 05, 2014, 02:07:28 PM
 #53

The app was written using .net so I used telerik justdecompile.

Blooming great it is and its free.

http://www.telerik.com/products/decompiler.aspx

Also

http://www.telerik.com/fiddler

for web app spying and spoofying.
omgbossis21
Sr. Member
****
Offline Offline

Activity: 336
Merit: 250


View Profile
August 05, 2014, 10:05:22 PM
 #54

Looks like a nice decompiler, I'll have to check it out.  I always use IDA though I mostly decompile android software.
defaced
Legendary
*
Offline Offline

Activity: 2184
Merit: 1011


Franko is Freedom


View Profile WWW
August 06, 2014, 02:08:03 PM
 #55

That is a really nice decomplier. Nice find, I warned the ADN thread.

Fortune Favors the Brave
Borderless CharityEXPANSEEXRAllergy FinderFranko Is Freedom
TwinWinNerD
Legendary
*
Offline Offline

Activity: 1680
Merit: 1001


CEO Bitpanda.com


View Profile WWW
August 06, 2014, 02:54:09 PM
 #56

Are unencrypted wallets really that common? I thought it was common practice to encrypt everything.

s1lverbox
Legendary
*
Offline Offline

Activity: 2324
Merit: 1039


View Profile
August 06, 2014, 03:27:27 PM
 #57

Since this is NOT blackcoinpools fault, can we get OP to CHANGE the title of this thread please? I'm more than happy to reimburse if it wasnt done already.

i send you some messages without responde, i will change the title when i get my coins backs.
after all i was infected through blackcoinpool i hope you guys take the right decision reimburse my coins.



no offence but your line above looks like extortion.
you should change title and wait for their decision.  I don't think they are responsible for mess done on your side.

If it's down to money in don't trust anyone. beside they said you wasn't mining with them.

always encrypt wallet or use paper one as cold storage.
sammir (OP)
Member
**
Offline Offline

Activity: 72
Merit: 10



View Profile
August 06, 2014, 06:41:12 PM
 #58

the problem is solved guys titled changed, the next time i will take more carefull, so sorry for all involved in this fact.

1HwERQLFH4wxHiikQkbP899YEhhB7tFHN
chnchapters
Member
**
Offline Offline

Activity: 106
Merit: 10


View Profile
August 06, 2014, 08:39:13 PM
 #59

Confirmed

We're gathering all the necessary information and evidence right now.
Suspect that the person compiling binaries for SGMiner (www.sgminerwindows.com) was trying to pull a fast one.

Interested to know what you gathered.

And BTW, what program are you using to reserve engineer the miners and get such a clean code?

The program I used is called IDA / hexrays
check it out,

I gathered a lot of stuff actually, I saved each step we did along the way..
chnchapters
Member
**
Offline Offline

Activity: 106
Merit: 10


View Profile
August 06, 2014, 08:45:49 PM
 #60

The scammer here has other versions of SGminer that contain the hidden script, I can point the code out there as well.
He is also the creator of Shire Coin, which is a scam because it uses the same code to steal coins if you
download the wallet.
Pages: « 1 2 [3] 4 5 »  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!