Topic: How to find real Electrum? - page 2. (Read 18065 times)

There is nothing infected. It’s an vulnerability that lets the servers send customized messages to Electrum wallets connected to it.

The devs are already using the same vulnerability to warn the users on the affected versions.

This is serious shit!

Is there no way to warn users before they install the hacked wallet? If the hacker can still infect older wallet versions then devs should have no trouble sending out a general warning via all servers.
People are still losing money and its total bullshit.

It is a false positive... For some reason (shitty heuristics), a number of antivirus applications detect programs that use PyInstaller as having trojans... I think it is because a number of viruses/malware apps use PyInstaller... so the antivirus incorrectly marks ALL apps that use it as being trojans

If you downloaded from https://electrum.org/#download and follow the instructions here: https://bitzuma.com/posts/how-to-verify-an-electrum-download-on-windows/

And the digital signature checks out OK, you can be confident that you have a legitimate copy of Electrum and that it is safe. Ignore Windows Defender, it is a shit antivirus.

If you send it as a RBF enabled transaction, you can try to send it again by paying a higher fee with different outputs but if you haven't done it before you'll probably fail to do it before your first transaction gets a confirmation. (I did it before long time ago but if I had to do it again, I wouldn't make it in time probably) You are racing with seconds right now.

You better google "child pays for the parent" and "replace by fee" right away.

This post here explains it quite well:
https://bitcoin.stackexchange.com/questions/49723/replace-by-fee-vs-child-pays-for-parent


Do not click anything. Delete that shit and never download it again. (don't delete your wallet files) Use only the core wallet.

Also fuck electrum. Just stop using that malware.

I am (was) also an electrum user but seeing these people getting scammed like this finished it for me.

electrum.org file is not safe! it contains a trojan!


I received the same error on my electrum wallet 3.3.2, but instead of downloading from the link, I went to download the new .exe installer for windows on electrum.org website.

As soon as I downloaded it, windows defender showed me an error of a trojan on the file.

Not sure what to do, if I leave the previous version Im exposed to phishing, but if I download the new version from the electrum.org website I get a trojan warning message from windows defender.

Any updates on this?

https://imgbbb.com/image/tyI0r

Пoмoгитe ПOЖAЛУЙCTA,тoлькo чтo cдeлaл oтпpaвкy биткoйнoв чepeз микcep,нaжaл oтпpaвить выcвeтилocь oкнo гдe былo нaпиcaнo oбнoвитe вepcию и пoдoбнoe,ccылoк нa cкaчивaния вepcий нe былo,я нaжaл oк .Я нaжимaл oтпpaвить биткoйн нa aдpec,пocлe чeгo oкнo нaжaл oк,нaчaл oбнoвлять вepcию,cмoтpю a пepeвoд yжe пoшёл,пocлe чeгo нaчaл cмoтpeть тpaнзaкцию пepeвoдa,oтпpaвкa yжe пpoизoшлa a вoт нa aдpec yкaзaнный мнoю дo cиx пop нe пpишли биткoйны пpoшлo yжe 3 чaca и нe oднoй пoдтвepждeннoй тpaнзaкции пoмoгитe пoжaлyйcтa мyжики,я нe пoймy мeня oбoкpaли или кaк?Я пo ccылкaм нe кaким нe пepexoдил,пpocтo вcплылo oкнo мaлeнькoe и я нaжaл oк и вcё!



Help PLEASE, just made sending bitcoins through a mixer, clicked send a window appeared where update was written and so on, there were no versions download links, I clicked ok. I clicked send bitcoin to the address, after which the window clicked ok, I started updating version , I look and the translation has already gone, after which I started watching the transfer transaction, sending has already taken place, but bitcoins have not yet arrived at the address I have already received 3 hours and not one confirmed transaction please help the guys, I don’t understand me or what? I didn’t follow the links by any means, a small window popped up and I clicked ok and that's it!

yes, I know about sig https://bitcointalksearch.org/topic/how-to-verify-your-electrum-windows-linux-mac-5105901
But I want to check file (hash of exe).

ThomasV, today I have found 3 more threads about "hacked" electrum and phshing. Could you, please, post everywhere (here in pinned thread, in twitter) MD5 / SHA-1 / signature of real Electrum 3.3.3 ? not only sig, but also MD5 / SHA-1 of files.
In will be secure, to check this info in 2 sources (download on official website and check hashes of .exe's here and in twitter. Really more secure.
Because I don't know till now, where is real electrum.

You can already verify the sig. If you still don't trust it, you can build it from scratch as explained on the GitHub page. I'm not sure if Thomas would reply because he already gave his GPG fingerprint.

Just verify the signatures.

Electrum is commonly acussed as a trojan by a few random AV’s. But that’s just a false-positive. It happens all the time.

Here is Electrum’s “official” explanation:
More: https://github.com/spesmilo/electrum/issues/3198#issuecomment-458949319

Lucius, yeah, just seen that thread.

ThomasV, could you, please, write here in sticky thread MD5 / SHA-1 / signature of real Electrum 3.3.3 ?

Can't you just use a pruned bitcoin core wallet instead? It is not a download and go solution like electrum but once you set it up you can use it like the way you use electrum.

Whatever you do, don't click those pop-ups.

If you are on Windows check this thread with tutorial to verify signature : https://bitcointalksearch.org/topic/how-to-verify-your-electrum-windows-linux-mac-5105901

In general you should be safe if you download from official site, and if you verify signature. Nothing more then this can not be done, and if you follow all steps you should be good.

Regarding virustotal detection, it is in most cases false detection by some minor av engines, and I think this is also such case. There is few threads where this issue is explain in more details.

You should update to latest version, because developers fix problem with bad servers displaying links to fake wallets, but take your time and triple check every step to be sure that you have legit version.

Hi, guys!
I have a question, first of all to developer @ThomasV

I'm using now Electrum 3.0, software asked me to update.
Because of huge amount of fakes, I'm afraid to do this.

How can I verify, that https://electrum.org/#download is good and real electrum, not fake?
Developers, could you in second source, post MD5 / SHA-1 of real Electrum? Here on BTtalk or in oficial twitter?

Is this real Electrum https://www.virustotal.com/#/file/09e877b25a518eba9c4b2b874f4af980f577764065e841e9066c15d7e802610a/detection
Why it's detected by AVs as trojan?