Help 6.35 BITCOINS STOLEN FROM MULTIBIT WALLET

[stewartpel]

i had 6.35 btc in my multibit wallet at night

i started my multibit wallet in morning and saw that someone sent all 6.35 btc to

1BdwRVvYZdugZFmEZB1ipnViscEMQDMGhD

the current balance is 0 btc

i never sent the btc and do not know whose address is that

i checked it on blockchain and it had 52 confirmations but its showing as unspent

can someone tell a noob like me whether its stolen?

p.s. i had a computer crash as i unplugged my laptop without switching off...did it wipe out my btc or someone stole it

can i recover it somehow

[1713517751]

1713517751

[1713517751]

1713517751

[1713517751]

1713517751

[1713517751]

1713517751

[1713517751]

1713517751

[sl@ppy]

scroll down this page and read the thread titled  'bitcoin wallet hacked'

[notlist3d]

i had 6.35 btc in my multibit wallet at night

i started my multibit wallet in morning and saw that someone sent all 6.35 btc to

1BdwRVvYZdugZFmEZB1ipnViscEMQDMGhD

the current balance is 0 btc

i never sent the btc and do not know whose address is that

i checked it on blockchain and it had 52 confirmations but its showing as unspent

can someone tell a noob like me whether its stolen?

p.s. i had a computer crash as i unplugged my laptop without switching off...did it wipe out my btc or someone stole it

can i recover it somehow

It's not fun but if it was sent, it is gone.  Especially with confirmations it is gone.   You have to treat wallets like gold.

There is not a recovery, it is not like a credit card or bank.   I would scan for virus and malaware.  Chances are sadly you had something that took your wallet file.

[stewartpel]

my computer was shut down all night and there is no one who could send it

i started it in morning and there were 0 btc and 13 confirmations of that transaction

man this btc is costing me crazy....gotta start dayjob again

[hexafraction]

my computer was shut down all night and there is no one who could send it

Someone must have gotten your private key, via some malware or other intrusion. Accept the mistake, clean your computer thoroughly, and start anew. Sob stories aren't accepted well on Bitcointalk, while constructive analysis of a problem is.

[notlist3d]

my computer was shut down all night and there is no one who could send it

Someone must have gotten your private key, via some malware or other intrusion. Accept the mistake, clean your computer thoroughly, and start anew. Sob stories aren't accepted well on Bitcointalk, while constructive analysis of a problem is.

Do not invest more until you scan computer and find the virus or malaware.  Might try encryption, I highly suggest it.

[twister]

can someone tell a noob like me whether its stolen?

p.s. i had a computer crash as i unplugged my laptop without switching off...did it wipe out my btc or someone stole it

can i recover it somehow

Yeah, it looks like it was stolen, someone got your key through a malware/virus, read through the foum and learn more about cold wallets. No, the computer can not wipe out your BTC, the most it can do is corrupt a wallet, which is why it is always advised to take backups. And no to your last question, they can not be recovered.

[pooya87]

it is most probably a malware on your computer. did you check your computer with an antivirus or anti malware?

[HeroCat]

It sounds like malware did that. The first task would be to find that malware in the computer. There is a soft  - antimalware or something like that. 

[stewartpel]

i checked on blockchain and seems like that address stole from other people too

1BdwRVvYZdugZFmEZB1ipnViscEMQDMGhD

its still showing as unspent....can i somehow get it back if bitcoin reverses this fraudelent transaction

[hexafraction]

i checked on blockchain and seems like that address stole from other people too

1BdwRVvYZdugZFmEZB1ipnViscEMQDMGhD

its still showing as unspent....can i somehow get it back if bitcoin reverses this fraudelent transaction

No, you cannot. Bitcoin does not "reverse" transactions, especially given the time and confirmations that passed since the theft. Even if Satoshi Nakamoto, or some dev wanted to reverse the transaction, they would have no way of doing so except by convincing a large portion of the network to accept changes to the codebase that specifically ignore that transaction--a very unlikely prospect.

Of course, you could always undo the transaction if you had control of the private key for 1BdwRVv....

[NiceSoft12]

my computer was shut down all night and there is no one who could send it

Someone must have gotten your private key, via some malware or other intrusion. Accept the mistake, clean your computer thoroughly, and start anew. Sob stories aren't accepted well on Bitcointalk, while constructive analysis of a problem is.

Could anti viruses detect these kinds of malwares that go for your wallet keys and such?

I ask because I am still curious how anti viruse software work.  Do they scan file names or do they scan what the file/app does?  Like for example, i've seen antivirus catch a file that had suspicious name.  So if i change the name of good file to name of a virus, would anti virus think that is a virus?

[BlindMayorBitcorn]

my computer was shut down all night and there is no one who could send it

Someone must have gotten your private key, via some malware or other intrusion. Accept the mistake, clean your computer thoroughly, and start anew. Sob stories aren't accepted well on Bitcointalk, while constructive analysis of a problem is.

Could anti viruses detect these kinds of malwares that go for your wallet keys and such?

I ask because I am still curious how anti viruse software work.  Do they scan file names or do they scan what the file/app does?  Like for example, i've seen antivirus catch a file that had suspicious name.  So if i change the name of good file to name of a virus, would anti virus think that is a virus?

I'm always skeptical of newbie posters with oddly improbable losses. Where could OP have contracted a malware savvy enough to send from a closed wallet on a sleeping computer? Do they exist?

[f3tus]

Do they scan file names or do they scan what the file/app does?  Like for example, i've seen antivirus catch a file that had suspicious name.  So if i change the name of good file to name of a virus, would anti virus think that is a virus?

They don't scan file names, renaming something to virus.exe won't do anything. They scan for files trying to do "suspicious behaviour" and looking for certain signatures of known viruses (virii in plural, actually) in their executable code, which are in the "database" your anti-virus regularly updates to stay up-to-date.

Where could OP have contracted a malware savvy enough to send from a closed wallet on a sleeping computer? Do they exist?

Steal wallet file, upload to your PC, get password with keylogger, done.

[BlindMayorBitcorn]

Do they scan file names or do they scan what the file/app does?  Like for example, i've seen antivirus catch a file that had suspicious name.  So if i change the name of good file to name of a virus, would anti virus think that is a virus?

They don't scan file names, renaming something to virus.exe won't do anything. They scan for files trying to do "suspicious behaviour" and looking for certain signatures of known viruses (virii in plural, actually) in their executable code, which are in the "database" your anti-virus regularly updates to stay up-to-date.

Where could OP have contracted a malware savvy enough to send from a closed wallet on a sleeping computer? Do they exist?

Steal wallet file, upload to your PC, get password with keylogger, done.

Would that be done with two seperate virus'? What is the usual delivery method? (How do you get 'em?)

[f3tus]

No, it only takes one trojan that gives a hacker full remote control to do whatever he wants via a remote command prompt, and it's all done without you knowing.

Usually people that aren't "computer literate" download infected files (.exe, .jar) via a phishing email or some other place thinking they're downloading something else, or download random shitty programs called "Windows Cleaner Extreme" and such that promise to "speed up your PC," or have an outdated version of Java (or Flash, but that's quite uncommon) installed and they get infected when they simply visit a website that runs the Java exploit and infects them with a trojan. A few years ago it was common to get infected by a worm in Microsoft Office files (.doc, .xls, .ppt...), but I'd be surprised if that'd happen any time in the future again.

So:
Have an anti-virus installed, don't download random shit, keep Java/Flash/other plugins up-to-date or even disabled by default in your browser. And the only recommended "cleaner" software to "speed up your PC" is CCleaner, but it won't actually speed up your PC.

If you have a Mac or Linux, you don't even need an anti-virus, because they're more secure than Windows.

[crazyearner]

The more I hear about using this wallet to use as an alt the more I want to install and start using. However after seeing another story like this has again put me off from using. Maybe wallet stealer or malware on system but to be honest I would love to start using services but am sceptical to use due to more storeys like this with my coins went missing or stolen.

[BlindMayorBitcorn]

No, it only takes one trojan that gives a hacker full remote control to do whatever he wants via a remote command prompt, and it's all done without you knowing.

Usually people that aren't "computer literate" download infected files (.exe, .jar) via a phishing email or some other place thinking they're downloading something else, or download random shitty programs called "Windows Cleaner Extreme" and such that promise to "speed up your PC," or have an outdated version of Java (or Flash, but that's quite uncommon) installed and they get infected when they simply visit a website that runs the Java exploit and infects them with a trojan. A few years ago it was common to get infected by a worm in Microsoft Office files (.doc, .xls, .ppt...), but I'd be surprised if that'd happen any time in the future again.

So:
Have an anti-virus installed, don't download random shit, keep Java/Flash/other plugins up-to-date or even disabled by default in your browser. And the only recommended "cleaner" software to "speed up your PC" is CCleaner, but it won't actually speed up your PC.

If you have a Mac or Linux, you don't even need an anti-virus, because they're more secure than Windows.

Done and done. Gracias amigo

[BlindMayorBitcorn]

The more I hear about using this wallet to use as an alt the more I want to install and start using. However after seeing another story like this has again put me off from using. Maybe wallet stealer or malware on system but to be honest I would love to start using services but am sceptical to use due to more storeys like this with my coins went missing or stolen.

Multibit has always been good enough for me. I don't know..

[crazyearner]

The more I hear about using this wallet to use as an alt the more I want to install and start using. However after seeing another story like this has again put me off from using. Maybe wallet stealer or malware on system but to be honest I would love to start using services but am sceptical to use due to more storeys like this with my coins went missing or stolen.

Multibit has always been good enough for me. I don't know..

Maybe just people having bad times or malware on system stealing wallets and info is the cause of the problem. Can you import wallets from Bitcoin QT to it using private key etc to import like on BitcoinQT ??