My BitCoins Being Hacked? - page 2. | Bitcointalksearch.org

Kaepora

newbie

Activity: 42

Merit: 0

Quote from: BitCoinNewGuy on May 28, 2013, 09:55:31 PM

Norton AntiVirus is "Blocking a hacking/malicious website intrusion attempt" whenever opening BitCoin-QT.

Info:
Network traffic from checkip.dyndns.org/ matches the signature of a known attack. The attack was resulted from \DEVICE\HARDDISKVOLUME1\PROGRAM FILES\BITCOIN\BITCOIN-QT.EXE.

I have moved my 1.766 BitCoins to another location....is this a virus something to worry about?

Please only reply with facts and not speculation of what this might be.

Update:
Scanned Computer [FULL SCAN] and it was clean.
Each time BitCoin-Qt is opened, the message pops up still!

get Microsoft security essentials, update scan then download malware bytes update and do a full scan

notlist3d

legendary

Activity: 1456

Merit: 1000

Also try scanning with multiple programs. One malwarebytes, avg both free. I would reboot and try again. Some can be a pain to get rid of.

kodo

newbie

Activity: 42

Merit: 0

looks like you downloaded a virus?

01BTC10

vip

Activity: 756

Merit: 503

Quote from: BitCoinNewGuy on May 28, 2013, 10:23:19 PM

Ok, I turned Norton AntiVirus off, but now something "Trojan.Zbot" has been 'detected' and 'not blocked'.

Is Trojan.Zbot part of BitCoin too? I found the file and opened it and let it run, don't wanna lose my BitCoins!!

Not part of Bitcoin.

http://en.wikipedia.org/wiki/Zeus_(Trojan_horse)

notlist3d

legendary

Activity: 1456

Merit: 1000

Norton is good for one thing.... rebates lol. But on a side note +1 for you being proactive and not trusting just any program.

Try another anti-virus. Some can be real pains to get rid of on malware. Is it first time you have gotten this warning, or is it happening with other programs?

Blazr

hero member

Activity: 882

Merit: 1006

Quote from: BitCoinNewGuy on May 28, 2013, 10:23:19 PM

Trojan.Zbot

http://www.f-secure.com/v-descs/trojan-spy_w32_zbot.shtml

If you have been infected with this then I would be very wary to access any banking/bitcoin related stuff on that machine until you reformat and reinstall.

What site did you download your copy of Bitcoin-QT from?

kodo

newbie

Activity: 42

Merit: 0

First Step:Delete Norton Antivirus
Second Step: Be thankful you deleted Nortan Anti Virus!

BitCoinNewGuy

member

Activity: 84

Merit: 10

'That Guy'

Ok, I turned Norton AntiVirus off, but now something "Trojan.Zbot" has been 'detected' and 'not blocked'.

Is Trojan.Zbot part of BitCoin too? I found the file and opened it and let it run, don't wanna lose my BitCoins!!

Caesium

hero member

Activity: 546

Merit: 500

Oh dear, Norton Antivirus.

This is perfectly normal behaviour from the bitcoin client. See https://github.com/bitcoin/bitcoin/blob/master/src/net.cpp#L340 for where it is invoked.

Just Norton spreading FUD as usual. Do yourself a favour and nuke it :p

BitCoinNewGuy

member

Activity: 84

Merit: 10

'That Guy'

Norton AntiVirus is "Blocking a hacking/malicious website intrusion attempt" whenever opening BitCoin-QT.

Info:
Network traffic from checkip.dyndns.org/ matches the signature of a known attack. The attack was resulted from \DEVICE\HARDDISKVOLUME1\PROGRAM FILES\BITCOIN\BITCOIN-QT.EXE.

I have moved my 1.766 BitCoins to another location....is this a virus something to worry about?

Please only reply with facts and not speculation of what this might be.

Update:
Scanned Computer [FULL SCAN] and it was clean.
Each time BitCoin-Qt is opened, the message pops up still!

Topic: My BitCoins Being Hacked? - page 2. (Read 1600 times)