13JF5274VuNthhwKkLrYyZW73smjSYAEen | Bitcointalksearch.org

Velkro

legendary

Activity: 2296

Merit: 1014

Quote from: Iranus on March 26, 2017, 02:24:10 AM

So you're saying that whenever you copy an address the same address gets pasted?

That most likely means you've got a virus and you need to run some scans.

Its 100% u got a virus. Reinstall ur system entirely to be sure its safe.

etherparty

full member

Activity: 419

Merit: 101

Use a good antivirus software to clean your computer or better re-install the OS altogether.

With a clean computer and an active AV on it you should be safer.

cryptocoinplay

sr. member

Activity: 293

Merit: 250

https://tinyurl.com/cheapVPS200

Hahaha Bro This Thread is for you: https://bitcointalksearch.org/topic/copy-paste-virus-for-bitcoin-users-beware-1841658

iamTom123

hero member

Activity: 490

Merit: 501

I have a friend who experienced the same thing a month ago. Because he did not checked the address where to send the Bitcoin, what he actually pasted into the wallet is a different wallet address which he did not know really existed. All of his Bitcoin was transferred to someone he did not know and since there is no way to recover them he just resigned to the fact that they are gone for good. I think he got a virus or something that can manipulate anytime he will use his wallet. I never realized that this thing also happened to other people.

Mike Mayor

hero member

Activity: 966

Merit: 535

Quote from: shorena on March 26, 2017, 01:05:11 PM

Quote from: LFC_Bitcoin on March 26, 2017, 11:48:50 AM

If you have a moderate to large amount of bitcoin's on that computer get them the fuck out. Wipe the entire computer clean & start again or even buy a new one. Sometimes being overly paranoid is a good thing regarding bitcoin.

I am not saying this is what you suggested, I just want it to be crystal clear.

DO NOT USE THE MACHINE TO SEND ANY MORE COINS. Copy the wallet file by all means, but DO NOT UNLOCK THE WALLET on an infected machine.

I would say take the wallet.dat just as you guys have said. Then take it to a fresh computer but transfer the wallet.dat on a USB that has been scanned and is clean then scan it again afterwards or use Dropbox maybe but don't meet the file on drop box delete it afterwards. I would format that machine. The whole damn thing. If an antivirus picks it up I would be afraid it doesn't delete all of it or it comes back one day and poof ! You just sent your money to the wrong address. Sad

shorena

copper member

Activity: 1498

Merit: 1528

No I dont escrow anymore.

Quote from: LFC_Bitcoin on March 26, 2017, 11:48:50 AM

If you have a moderate to large amount of bitcoin's on that computer get them the fuck out. Wipe the entire computer clean & start again or even buy a new one. Sometimes being overly paranoid is a good thing regarding bitcoin.

I am not saying this is what you suggested, I just want it to be crystal clear.

DO NOT USE THE MACHINE TO SEND ANY MORE COINS. Copy the wallet file by all means, but DO NOT UNLOCK THE WALLET on an infected machine.

LFC_Bitcoin

legendary

Activity: 3556

Merit: 9709

#1 VIP Crypto Casino

If you have a moderate to large amount of bitcoin's on that computer get them the fuck out. Wipe the entire computer clean & start again or even buy a new one. Sometimes being overly paranoid is a good thing regarding bitcoin.

NorrisK

legendary

Activity: 1946

Merit: 1007

Also, seriously reconsider what stuff you are downloading and what you do to find out if it is secure to run.

If you contracted a trojan like this once, if you don't change your behaviour, you will likely get one again after you remove it.

HI-TEC99

legendary

Activity: 2772

Merit: 2846

Quote from: shorena on March 26, 2017, 05:40:53 AM

Quote from: craZyLovE0916 on March 26, 2017, 02:09:15 AM

is there anyway to bug the address??

look at this addres 13JF5274VuNthhwKkLrYyZW73smjSYAEen

i played dice.. not important the sites when i copy the address then i paste it to make deposit, this is the address always shows 13JF5274VuNthhwKkLrYyZW73smjSYAEen
so i had made it twice .. yeah beacuse i dont notice it until asking myself why i dont get any confirmation.. then i check my wallet.. so i tried to copy again to paste it still showing that address

https://blockchain.info/tx/a20094ca1589c02e960ed0de824e1abe6ba2a489c1baa5b09bbc7ee5bb771d07
https://blockchain.info/tx/a150d7f785480dfb1c5c21ac54526ba2d08bd31c6342b7480a82741785899d6e
not big but if you check the address those earlier depositors making big deposit got hack i guess...

There is known malware (dont remember the name) that finds and replaces bitcoin address in your clipboard. Sounds like you are infected.

Symantec describes one called the Trojan.Coinbitclip virus, although there are probably many others. It recommends a complete system scan, but has a faster fix using a removal tool.

Personally I would remove it using a free linux live CD from another company, then get all my data off windows, then wipe the disk and reinstall windows.

https://www.symantec.com/security_response/writeup.jsp?docid=2016-020216-4204-99&tabid=2

Quote

Discovered: February 2, 2016
Updated: February 2, 2016 6:51:26 PM
Type: Trojan
Infection Length: Varies
Systems Affected: Windows
Once executed, the Trojan creates the following files:
%AppData%\Blizzard\Hearthstone.exe
%UserProfile%\Application Data\hearthstone\updater.exe

The Trojan creates the following registry entry so that it runs every time Windows starts:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\"Hearthstone.exe" = "%AppData%\Blizzard\Hearthstone.exe2

The Trojan then monitors the compromised computer for Bitcoin addresses copied to the clipboard.

The Trojan contains a hardcoded list of Bitcoin addresses.

Once the Trojan detects a Bitcoin address in the clipboard, it replaces it with one from the hardcoded list.

The Trojan selects an address from the list that most closely resembles the address it is replacing.

Both kaspersky and avira offer free CDs for scanning and removing viruses.

https://support.kaspersky.co.uk/viruses/rescuedisk

https://www.avira.com/en/download/product/avira-rescue-system

The OP of this thread had a similar virus, and some posts in it recommend using those live CDs.

https://bitcointalksearch.org/topic/clipboard-hijacking-1780068

shorena

copper member

Activity: 1498

Merit: 1528

No I dont escrow anymore.

Quote from: craZyLovE0916 on March 26, 2017, 02:09:15 AM

is there anyway to bug the address??

look at this addres 13JF5274VuNthhwKkLrYyZW73smjSYAEen

i played dice.. not important the sites when i copy the address then i paste it to make deposit, this is the address always shows 13JF5274VuNthhwKkLrYyZW73smjSYAEen
so i had made it twice .. yeah beacuse i dont notice it until asking myself why i dont get any confirmation.. then i check my wallet.. so i tried to copy again to paste it still showing that address

https://blockchain.info/tx/a20094ca1589c02e960ed0de824e1abe6ba2a489c1baa5b09bbc7ee5bb771d07
https://blockchain.info/tx/a150d7f785480dfb1c5c21ac54526ba2d08bd31c6342b7480a82741785899d6e
not big but if you check the address those earlier depositors making big deposit got hack i guess...

There is known malware (dont remember the name) that finds and replaces bitcoin address in your clipboard. Sounds like you are infected.

ultrloa

legendary

Activity: 2758

Merit: 1228

Quote from: craZyLovE0916 on March 26, 2017, 02:09:15 AM

is there anyway to bug the address??

look at this addres 13JF5274VuNthhwKkLrYyZW73smjSYAEen

i played dice.. not important the sites when i copy the address then i paste it to make deposit, this is the address always shows 13JF5274VuNthhwKkLrYyZW73smjSYAEen
so i had made it twice .. yeah beacuse i dont notice it until asking myself why i dont get any confirmation.. then i check my wallet.. so i tried to copy again to paste it still showing that address

https://blockchain.info/tx/a20094ca1589c02e960ed0de824e1abe6ba2a489c1baa5b09bbc7ee5bb771d07
https://blockchain.info/tx/a150d7f785480dfb1c5c21ac54526ba2d08bd31c6342b7480a82741785899d6e
not big but if you check the address those earlier depositors making big deposit got hack i guess...

I think you downloaded a virus and you should run an antivirus so that you won't compromised by it and i remember that their are several cases just like that and stolen money of the people who suddenly pasted that wallet addy. You should be more carefull from this kind of malware and don't ever click some unknown links so that you wouldn't be hit by the stealers.

Iranus

hero member

Activity: 1792

Merit: 534

Leading Crypto Sports Betting & Casino Platform

So you're saying that whenever you copy an address the same address gets pasted?

That most likely means you've got a virus and you need to run some scans. Those viruses are pretty annoying because if you forget about them at any point and copy/paste you might lose your Bitcoin.

You could look at this guide for compromised computers (although that kind of virus probably won't threaten your security).

craZyLovE0916

sr. member

Activity: 588

Merit: 250

is there anyway to bug the address??

look at this addres 13JF5274VuNthhwKkLrYyZW73smjSYAEen

i played dice.. not important the sites when i copy the address then i paste it to make deposit, this is the address always shows 13JF5274VuNthhwKkLrYyZW73smjSYAEen
so i had made it twice .. yeah beacuse i dont notice it until asking myself why i dont get any confirmation.. then i check my wallet.. so i tried to copy again to paste it still showing that address

https://blockchain.info/tx/a20094ca1589c02e960ed0de824e1abe6ba2a489c1baa5b09bbc7ee5bb771d07
https://blockchain.info/tx/a150d7f785480dfb1c5c21ac54526ba2d08bd31c6342b7480a82741785899d6e
not big but if you check the address those earlier depositors making big deposit got hack i guess...

Topic: 13JF5274VuNthhwKkLrYyZW73smjSYAEen (Read 2952 times)