Help 6.35 BITCOINS STOLEN FROM MULTIBIT WALLET

hexafraction

sr. member

Activity: 392

Merit: 259

Tips welcomed: 1CF4GhXX1RhCaGzWztgE1YZZUcSpoqTbsJ

Quote from: crazyearner on December 13, 2014, 10:28:25 PM

Would take me ages to try and locate first one lol too many transactions across 30+ addresses think am just going to leave it for now until I am sure I know what am doing than to risk and have more problems. Maybe in the future but not now maybe next weekend who knows but once figured it out and understand what am actually doing then ill give it a bash.

You can always estimate earlier (by years even). The sync will take longer, but no inconsistencies will result.

crazyearner

legendary

Activity: 1820

Merit: 1001

Quote from: hexafraction on December 13, 2014, 10:18:18 PM

Quote from: BlindMayorBitcorn on December 13, 2014, 10:15:47 PM

Quote from: hexafraction on December 13, 2014, 10:14:03 PM

Quote from: crazyearner on December 13, 2014, 10:08:41 PM

Quote from: hexafraction on December 13, 2014, 08:49:18 PM

It does not have a command line window. You would simply take a template, and paste your private keys into that template. That file will then be what you will import.

So can you add the privekeys to notepad and then change the file type name to what is needed or need a proper editor to do it as I do not think I could work such things otherwise just going to leave it alone.

Notepad or Notepad++ would work. I'll get the template you'll need to use shortly.

Sorry guys I'm confused. I just drag and drop my privkeys onto a USB for backup and assume they can be re-imported just as easily. Isn't it?

For Multibit->multibit backup and restore, yes. You would either save the .wallet file, or export to a .keys file.

Quote from: hexafraction on December 13, 2014, 10:14:03 PM

Notepad or Notepad++ would work. I'll get the template you'll need to use shortly.

Actually, it's a bit simpler:

Code:

L3utYPyxYOURPRIVATEKEYHERE 2012-12-10T01:17:04Z

Save it as "mykeys.key". In Multibit, Tools>Import Private Keys.

You would change the date to sometime before you created the wallet. Doesn't need to be exact, but definitely needs to be earlier than your first transaction (in or out).

Would take me ages to try and locate first one lol too many transactions across 30+ addresses think am just going to leave it for now until I am sure I know what am doing than to risk and have more problems. Maybe in the future but not now maybe next weekend who knows but once figured it out and understand what am actually doing then ill give it a bash.

hexafraction

sr. member

Activity: 392

Merit: 259

Tips welcomed: 1CF4GhXX1RhCaGzWztgE1YZZUcSpoqTbsJ

Quote from: BlindMayorBitcorn on December 13, 2014, 10:15:47 PM

Quote from: hexafraction on December 13, 2014, 10:14:03 PM

Quote from: crazyearner on December 13, 2014, 10:08:41 PM

Quote from: hexafraction on December 13, 2014, 08:49:18 PM

It does not have a command line window. You would simply take a template, and paste your private keys into that template. That file will then be what you will import.

So can you add the privekeys to notepad and then change the file type name to what is needed or need a proper editor to do it as I do not think I could work such things otherwise just going to leave it alone.

Notepad or Notepad++ would work. I'll get the template you'll need to use shortly.

Sorry guys I'm confused. I just drag and drop my privkeys onto a USB for backup and assume they can be re-imported just as easily. Isn't it?

For Multibit->multibit backup and restore, yes. You would either save the .wallet file, or export to a .keys file.

Quote from: hexafraction on December 13, 2014, 10:14:03 PM

Notepad or Notepad++ would work. I'll get the template you'll need to use shortly.

Actually, it's a bit simpler:

Code:

L3utYPyxYOURPRIVATEKEYHERE 2012-12-10T01:17:04Z

Save it as "mykeys.key". In Multibit, Tools>Import Private Keys.

You would change the date to sometime before you created the wallet. Doesn't need to be exact, but definitely needs to be earlier than your first transaction (in or out).

BlindMayorBitcorn

legendary

Activity: 1260

Merit: 1115

Quote from: hexafraction on December 13, 2014, 10:14:03 PM

Quote from: crazyearner on December 13, 2014, 10:08:41 PM

Quote from: hexafraction on December 13, 2014, 08:49:18 PM

It does not have a command line window. You would simply take a template, and paste your private keys into that template. That file will then be what you will import.

So can you add the privekeys to notepad and then change the file type name to what is needed or need a proper editor to do it as I do not think I could work such things otherwise just going to leave it alone.

Notepad or Notepad++ would work. I'll get the template you'll need to use shortly.

Sorry guys I'm confused. I just drag and drop my privkeys onto a USB for backup and assume they can be re-imported just as easily. Isn't it?

hexafraction

sr. member

Activity: 392

Merit: 259

Tips welcomed: 1CF4GhXX1RhCaGzWztgE1YZZUcSpoqTbsJ

Quote from: crazyearner on December 13, 2014, 10:08:41 PM

Quote from: hexafraction on December 13, 2014, 08:49:18 PM

It does not have a command line window. You would simply take a template, and paste your private keys into that template. That file will then be what you will import.

So can you add the privekeys to notepad and then change the file type name to what is needed or need a proper editor to do it as I do not think I could work such things otherwise just going to leave it alone.

Notepad or Notepad++ would work. I'll get the template you'll need to use shortly.

crazyearner

legendary

Activity: 1820

Merit: 1001

Quote from: hexafraction on December 13, 2014, 08:49:18 PM

It does not have a command line window. You would simply take a template, and paste your private keys into that template. That file will then be what you will import.

So can you add the privekeys to notepad and then change the file type name to what is needed or need a proper editor to do it as I do not think I could work such things otherwise just going to leave it alone.

hexafraction

sr. member

Activity: 392

Merit: 259

Tips welcomed: 1CF4GhXX1RhCaGzWztgE1YZZUcSpoqTbsJ

It does not have a command line window. You would simply take a template, and paste your private keys into that template. That file will then be what you will import.

crazyearner

legendary

Activity: 1820

Merit: 1001

Quote from: hexafraction on December 13, 2014, 08:28:45 PM

Quote from: crazyearner on December 13, 2014, 08:27:07 PM

Quote from: BlindMayorBitcorn on December 13, 2014, 07:29:35 PM

Quote from: crazyearner on December 13, 2014, 07:24:11 PM

The more I hear about using this wallet to use as an alt the more I want to install and start using. However after seeing another story like this has again put me off from using. Maybe wallet stealer or malware on system but to be honest I would love to start using services but am sceptical to use due to more storeys like this with my coins went missing or stolen.

Multibit has always been good enough for me. I don't know..

Maybe just people having bad times or malware on system stealing wallets and info is the cause of the problem. Can you import wallets from Bitcoin QT to it using private key etc to import like on BitcoinQT ??

Yes, it does support exporting and importing private keys in WIF, though it requires a text editor to create a file that multibit can read, with the keys inside it.

Does it have comand window like you can put in like importpriv key then key and imports that way as I have no idea how to make a WIF file using text editor file or so

hexafraction

sr. member

Activity: 392

Merit: 259

Tips welcomed: 1CF4GhXX1RhCaGzWztgE1YZZUcSpoqTbsJ

Quote from: crazyearner on December 13, 2014, 08:27:07 PM

Quote from: BlindMayorBitcorn on December 13, 2014, 07:29:35 PM

Quote from: crazyearner on December 13, 2014, 07:24:11 PM

The more I hear about using this wallet to use as an alt the more I want to install and start using. However after seeing another story like this has again put me off from using. Maybe wallet stealer or malware on system but to be honest I would love to start using services but am sceptical to use due to more storeys like this with my coins went missing or stolen.

Multibit has always been good enough for me. I don't know..

Maybe just people having bad times or malware on system stealing wallets and info is the cause of the problem. Can you import wallets from Bitcoin QT to it using private key etc to import like on BitcoinQT ??

Yes, it does support exporting and importing private keys in WIF, though it requires a text editor to create a file that multibit can read, with the keys inside it.

crazyearner

legendary

Activity: 1820

Merit: 1001

Quote from: BlindMayorBitcorn on December 13, 2014, 07:29:35 PM

Quote from: crazyearner on December 13, 2014, 07:24:11 PM

The more I hear about using this wallet to use as an alt the more I want to install and start using. However after seeing another story like this has again put me off from using. Maybe wallet stealer or malware on system but to be honest I would love to start using services but am sceptical to use due to more storeys like this with my coins went missing or stolen.

Multibit has always been good enough for me. I don't know..

Maybe just people having bad times or malware on system stealing wallets and info is the cause of the problem. Can you import wallets from Bitcoin QT to it using private key etc to import like on BitcoinQT ??

BlindMayorBitcorn

legendary

Activity: 1260

Merit: 1115

Quote from: crazyearner on December 13, 2014, 07:24:11 PM

The more I hear about using this wallet to use as an alt the more I want to install and start using. However after seeing another story like this has again put me off from using. Maybe wallet stealer or malware on system but to be honest I would love to start using services but am sceptical to use due to more storeys like this with my coins went missing or stolen.

Multibit has always been good enough for me. I don't know..

BlindMayorBitcorn

legendary

Activity: 1260

Merit: 1115

Quote from: f3tus on December 13, 2014, 05:12:07 AM

No, it only takes one trojan that gives a hacker full remote control to do whatever he wants via a remote command prompt, and it's all done without you knowing.

Usually people that aren't "computer literate" download infected files (.exe, .jar) via a phishing email or some other place thinking they're downloading something else, or download random shitty programs called "Windows Cleaner Extreme" and such that promise to "speed up your PC," or have an outdated version of Java (or Flash, but that's quite uncommon) installed and they get infected when they simply visit a website that runs the Java exploit and infects them with a trojan. A few years ago it was common to get infected by a worm in Microsoft Office files (.doc, .xls, .ppt...), but I'd be surprised if that'd happen any time in the future again.

So:
Have an anti-virus installed, don't download random shit, keep Java/Flash/other plugins up-to-date or even disabled by default in your browser. And the only recommended "cleaner" software to "speed up your PC" is CCleaner, but it won't actually speed up your PC.

If you have a Mac or Linux, you don't even need an anti-virus, because they're more secure than Windows.

Done and done. Gracias amigo

crazyearner

legendary

Activity: 1820

Merit: 1001

The more I hear about using this wallet to use as an alt the more I want to install and start using. However after seeing another story like this has again put me off from using. Maybe wallet stealer or malware on system but to be honest I would love to start using services but am sceptical to use due to more storeys like this with my coins went missing or stolen.

f3tus

sr. member

Activity: 317

Merit: 275

No, it only takes one trojan that gives a hacker full remote control to do whatever he wants via a remote command prompt, and it's all done without you knowing.

Usually people that aren't "computer literate" download infected files (.exe, .jar) via a phishing email or some other place thinking they're downloading something else, or download random shitty programs called "Windows Cleaner Extreme" and such that promise to "speed up your PC," or have an outdated version of Java (or Flash, but that's quite uncommon) installed and they get infected when they simply visit a website that runs the Java exploit and infects them with a trojan. A few years ago it was common to get infected by a worm in Microsoft Office files (.doc, .xls, .ppt...), but I'd be surprised if that'd happen any time in the future again.

So:
Have an anti-virus installed, don't download random shit, keep Java/Flash/other plugins up-to-date or even disabled by default in your browser. And the only recommended "cleaner" software to "speed up your PC" is CCleaner, but it won't actually speed up your PC.

If you have a Mac or Linux, you don't even need an anti-virus, because they're more secure than Windows.

BlindMayorBitcorn

legendary

Activity: 1260

Merit: 1115

Quote from: f3tus on December 12, 2014, 05:52:13 AM

Quote from: NiceSoft12 on December 11, 2014, 08:22:48 PM

Do they scan file names or do they scan what the file/app does? Like for example, i've seen antivirus catch a file that had suspicious name. So if i change the name of good file to name of a virus, would anti virus think that is a virus?

They don't scan file names, renaming something to virus.exe won't do anything. They scan for files trying to do "suspicious behaviour" and looking for certain signatures of known viruses (virii in plural, actually) in their executable code, which are in the "database" your anti-virus regularly updates to stay up-to-date.

Quote from: BlindMayorBitcorn on December 11, 2014, 08:37:40 PM

Where could OP have contracted a malware savvy enough to send from a closed wallet on a sleeping computer? Do they exist?

Steal wallet file, upload to your PC, get password with keylogger, done.

Would that be done with two seperate virus'? What is the usual delivery method? (How do you get 'em?)

f3tus

sr. member

Activity: 317

Merit: 275

Quote from: NiceSoft12 on December 11, 2014, 08:22:48 PM

Do they scan file names or do they scan what the file/app does? Like for example, i've seen antivirus catch a file that had suspicious name. So if i change the name of good file to name of a virus, would anti virus think that is a virus?

They don't scan file names, renaming something to virus.exe won't do anything. They scan for files trying to do "suspicious behaviour" and looking for certain signatures of known viruses (virii in plural, actually) in their executable code, which are in the "database" your anti-virus regularly updates to stay up-to-date.

Quote from: BlindMayorBitcorn on December 11, 2014, 08:37:40 PM

Where could OP have contracted a malware savvy enough to send from a closed wallet on a sleeping computer? Do they exist?

Steal wallet file, upload to your PC, get password with keylogger, done.

BlindMayorBitcorn

legendary

Activity: 1260

Merit: 1115

Quote from: NiceSoft12 on December 11, 2014, 08:22:48 PM

Quote from: hexafraction on December 03, 2014, 10:02:02 PM

Quote from: stewartpel on December 03, 2014, 09:59:32 PM

my computer was shut down all night and there is no one who could send it

Someone must have gotten your private key, via some malware or other intrusion. Accept the mistake, clean your computer thoroughly, and start anew. Sob stories aren't accepted well on Bitcointalk, while constructive analysis of a problem is.

Could anti viruses detect these kinds of malwares that go for your wallet keys and such?

I ask because I am still curious how anti viruse software work. Do they scan file names or do they scan what the file/app does? Like for example, i've seen antivirus catch a file that had suspicious name. So if i change the name of good file to name of a virus, would anti virus think that is a virus?

I'm always skeptical of newbie posters with oddly improbable losses. Where could OP have contracted a malware savvy enough to send from a closed wallet on a sleeping computer? Do they exist?

NiceSoft12

sr. member

Activity: 433

Merit: 251

Quote from: hexafraction on December 03, 2014, 10:02:02 PM

Quote from: stewartpel on December 03, 2014, 09:59:32 PM

my computer was shut down all night and there is no one who could send it

Someone must have gotten your private key, via some malware or other intrusion. Accept the mistake, clean your computer thoroughly, and start anew. Sob stories aren't accepted well on Bitcointalk, while constructive analysis of a problem is.

Could anti viruses detect these kinds of malwares that go for your wallet keys and such?

I ask because I am still curious how anti viruse software work. Do they scan file names or do they scan what the file/app does? Like for example, i've seen antivirus catch a file that had suspicious name. So if i change the name of good file to name of a virus, would anti virus think that is a virus?

hexafraction

sr. member

Activity: 392

Merit: 259

Tips welcomed: 1CF4GhXX1RhCaGzWztgE1YZZUcSpoqTbsJ

Quote from: stewartpel on December 09, 2014, 04:34:40 PM

i checked on blockchain and seems like that address stole from other people too

1BdwRVvYZdugZFmEZB1ipnViscEMQDMGhD

its still showing as unspent....can i somehow get it back if bitcoin reverses this fraudelent transaction

No, you cannot. Bitcoin does not "reverse" transactions, especially given the time and confirmations that passed since the theft. Even if Satoshi Nakamoto, or some dev wanted to reverse the transaction, they would have no way of doing so except by convincing a large portion of the network to accept changes to the codebase that specifically ignore that transaction--a very unlikely prospect.

Of course, you could always undo the transaction if you had control of the private key for 1BdwRVv....

stewartpel

newbie

Activity: 3

Merit: 0

i checked on blockchain and seems like that address stole from other people too

1BdwRVvYZdugZFmEZB1ipnViscEMQDMGhD

its still showing as unspent....can i somehow get it back if bitcoin reverses this fraudelent transaction

HeroCat

hero member

Activity: 658

Merit: 500

It sounds like malware did that. The first task would be to find that malware in the computer. There is a soft - antimalware or something like that. Wink

pooya87

legendary

Activity: 3444

Merit: 10558

it is most probably a malware on your computer. did you check your computer with an antivirus or anti malware?

twister

hero member

Activity: 672

Merit: 501

Quote from: stewartpel on December 03, 2014, 09:26:29 PM

can someone tell a noob like me whether its stolen?

p.s. i had a computer crash as i unplugged my laptop without switching off...did it wipe out my btc or someone stole it

can i recover it somehow

Yeah, it looks like it was stolen, someone got your key through a malware/virus, read through the foum and learn more about cold wallets. No, the computer can not wipe out your BTC, the most it can do is corrupt a wallet, which is why it is always advised to take backups. And no to your last question, they can not be recovered.

notlist3d

legendary

Activity: 1456

Merit: 1000

Quote from: hexafraction on December 03, 2014, 10:02:02 PM

Quote from: stewartpel on December 03, 2014, 09:59:32 PM

my computer was shut down all night and there is no one who could send it

Someone must have gotten your private key, via some malware or other intrusion. Accept the mistake, clean your computer thoroughly, and start anew. Sob stories aren't accepted well on Bitcointalk, while constructive analysis of a problem is.

Do not invest more until you scan computer and find the virus or malaware. Might try encryption, I highly suggest it.

hexafraction

sr. member

Activity: 392

Merit: 259

Tips welcomed: 1CF4GhXX1RhCaGzWztgE1YZZUcSpoqTbsJ

Quote from: stewartpel on December 03, 2014, 09:59:32 PM

my computer was shut down all night and there is no one who could send it

Someone must have gotten your private key, via some malware or other intrusion. Accept the mistake, clean your computer thoroughly, and start anew. Sob stories aren't accepted well on Bitcointalk, while constructive analysis of a problem is.

stewartpel

newbie

Activity: 3

Merit: 0

my computer was shut down all night and there is no one who could send it

i started it in morning and there were 0 btc and 13 confirmations of that transaction

man this btc is costing me crazy....gotta start dayjob again

notlist3d

legendary

Activity: 1456

Merit: 1000

Quote from: stewartpel on December 03, 2014, 09:26:29 PM

i had 6.35 btc in my multibit wallet at night

i started my multibit wallet in morning and saw that someone sent all 6.35 btc to

1BdwRVvYZdugZFmEZB1ipnViscEMQDMGhD

the current balance is 0 btc

i never sent the btc and do not know whose address is that

i checked it on blockchain and it had 52 confirmations but its showing as unspent

can someone tell a noob like me whether its stolen?

p.s. i had a computer crash as i unplugged my laptop without switching off...did it wipe out my btc or someone stole it

can i recover it somehow

It's not fun but if it was sent, it is gone. Especially with confirmations it is gone. You have to treat wallets like gold.

There is not a recovery, it is not like a credit card or bank. I would scan for virus and malaware. Chances are sadly you had something that took your wallet file.

sl@ppy

member

Activity: 65

Merit: 10

scroll down this page and read the thread titled 'bitcoin wallet hacked'

stewartpel

newbie

Activity: 3

Merit: 0

i had 6.35 btc in my multibit wallet at night

i started my multibit wallet in morning and saw that someone sent all 6.35 btc to

1BdwRVvYZdugZFmEZB1ipnViscEMQDMGhD

the current balance is 0 btc

i never sent the btc and do not know whose address is that

i checked it on blockchain and it had 52 confirmations but its showing as unspent

can someone tell a noob like me whether its stolen?

p.s. i had a computer crash as i unplugged my laptop without switching off...did it wipe out my btc or someone stole it

can i recover it somehow

Topic: Help 6.35 BITCOINS STOLEN FROM MULTIBIT WALLET (Read 2833 times)