Author

Topic: my wallet [Suspicious link removed] not receiving bitcoin, why? (Read 267 times)

legendary
Activity: 1624
Merit: 2481
format your computer and reinstall the Operating System.

^This is actually the only way to get safely rid of all kind of malware from your system (assuming it is not a root kit, which it isn't in most cases).
In case of it being a rootkit a reinstall won't help, but since most of these BTC stealing malwares are made by some 17y old script kiddies, the chances are very low. So you should be good to go with a complete format/reinstall.



If your computer is infected with the clipboard hijacker, it's possible it also has keyloggers (can harvest usernames/passwords etc) and possibly even Remote Access Tools (RATs) that could allow hackers to copy files directly from your computer. So, you should consider your computer totally compromised and avoid doing any "sensitive" work on it (accessing internet banking or other secure websites etc)

This is so important.
Change every(!) password you have entered on your PC in the last days/weeks/months (obviously not from your current infected system).

Usually it is not just a clipping malware, but a trojan horse with a backdoor (assuming the creator of the malware wasn't completely incapable).

The best would be to completely disconnect your PC from your network and make a local backup of your important(!) files. Then reeinstall your OS.
Oh, and make sure not to use any cracked OS (e.g. cracked windows), since those always contain backdoors (e.g. to include you into a botnet).
copper member
Activity: 2856
Merit: 3071
https://bit.ly/387FXHi lightning theory
When I click on the address and copy it, when I stick it I give the address 13D6FEsc8oJ4ynJD7hL52CM1GPzKp8YZh4, although on request is another. Is this a virus?
Yes. You should either run several virus scanners (bitdefender, malwarebytes) and malware removal utilities (like spybot, malwarebytes etc) or... format your computer and reinstall the Operating System. Personally, I'd recommend the format+reinstall method.

If your computer is infected with the clipboard hijacker, it's possible it also has keyloggers (can harvest usernames/passwords etc) and possibly even Remote Access Tools (RATs) that could allow hackers to copy files directly from your computer. So, you should consider your computer totally compromised and avoid doing any "sensitive" work on it (accessing internet banking or other secure websites etc)

I wouldn't even bother with a virus scan at this point.
Reinstall the OS completely and format your drive.
Then remember to use an antivirus on it - if you want to recover from a backup, scan that backup for viruses also (most av scanners will be able to scan ISO/vhd/zip files) although I'd suggest dong the scan on the media on a different device.
HCP
legendary
Activity: 2086
Merit: 4318
When I click on the address and copy it, when I stick it I give the address 13D6FEsc8oJ4ynJD7hL52CM1GPzKp8YZh4, although on request is another. Is this a virus?
Yes. You should either run several virus scanners (bitdefender, malwarebytes) and malware removal utilities (like spybot, malwarebytes etc) or... format your computer and reinstall the Operating System. Personally, I'd recommend the format+reinstall method.

If your computer is infected with the clipboard hijacker, it's possible it also has keyloggers (can harvest usernames/passwords etc) and possibly even Remote Access Tools (RATs) that could allow hackers to copy files directly from your computer. So, you should consider your computer totally compromised and avoid doing any "sensitive" work on it (accessing internet banking or other secure websites etc)


Did I lose the bitcoin?
Unfortunately, I would have to say yes Undecided
legendary
Activity: 3290
Merit: 16489
Thick-Skinned Gang Leader and Golden Feather 2021
When I click on the address and copy it, when I stick it I give the address 13D6FEsc8oJ4ynJD7hL52CM1GPzKp8YZh4, although on request is another. Is this a virus?
Yes Sad I'm sorry to confirm your money is gone.

See for example https://techcrunch.com/2018/07/03/new-malware-highjacks-your-windows-clipboard-to-change-crypto-addresses

It doesn't help you now, but in the future: you shouldn't trust copy/paste, but always check if it produces the correct address. Even checking just the first digits isn't enough, you should do a thorough check.
newbie
Activity: 10
Merit: 1
When I click on the address and copy it, when I stick it I give the address 13D6FEsc8oJ4ynJD7hL52CM1GPzKp8YZh4, although on request is another. Is this a virus?
newbie
Activity: 10
Merit: 1
I make this transaction on July 3, 2017
legendary
Activity: 3290
Merit: 16489
Thick-Skinned Gang Leader and Golden Feather 2021
Did I lose the bitcoin?
Did you make this transaction on July 11, 2017?

I don't think you did. It's a 32817 bytes transaction, with many inputs. I would guess it's a scammer consolidating his 2 Bitcoin "revenue" from his clipboard hijacker virus.
If that's the case, than unfortunately you lost your Bitcoins. That would also mean your computer is compromised and shouldn't be trusted anymore.
newbie
Activity: 10
Merit: 1
Did I lose the bitcoin?
legendary
Activity: 3290
Merit: 16489
Thick-Skinned Gang Leader and Golden Feather 2021
My wallet don't show me the adress (13D6FEsc8oJ4ynJD7hL52CM1GPzKp8YZh4) at "Used Addresses"
13D6FEsc8oJ4ynJD7hL52CM1GPzKp8YZh4 was used a year ago already. This address now holds 0.11923343 BTC.
If you didn't use it last year, someone else owns that address.

You can see the pictures here: https://imgur.com/a/f1F32U0 , you can clearly see that bitcoin is mine..
I see 39ShybSnGV9H5JdUics4NdkEMpZvk1vad7 on your screenshots. This address is now empty.

Quote
I created my wallet, I copied the address from my wallet to request bitcoin. I used coin mixer, I pasted the adress in output adress. I used the same method many times, but I never had problems.
Which mixer did you use? Did you receive a Letter of Guarantee? If so, can you PM it to me for verification?
Coinmixer.se, it already shows in the screenshots. Note that this now links those addresses together, so any past or future mixing on those addresses is no longer private.


I think it's either clipboard hijacking (most likely from what you told us), a man in the middle attack through your proxy (I would expect your browser to warn you if the ssl certificate changes), or a bug in Blockchain.
newbie
Activity: 10
Merit: 1
You can see the pictures here: https://imgur.com/a/f1F32U0 , you can clearly see that bitcoin is mine..
I created my wallet, I copied the address from my wallet to request bitcoin. I used coin mixer, I pasted the adress in output adress. I used the same method many times, but I never had problems.
copper member
Activity: 103
Merit: 8
AmaZix.com - Professional community management
Can you look up all the addresses you have on your wallet on explorer and see if there is any balance on any of them? I think users above are right, you probably got hit by a malicious script that replaces the wallet address with that of the hijacker. You've got to all related addresses here so users can help identify what went wrong, and transaction IDs.

Maybe screenshot the url you created the wallet at as well, your links are always removed by the forum.
newbie
Activity: 10
Merit: 1
I created my wallet on July 3 or 4, and the first "request" address was the one that she no longer recognizes.
HCP
legendary
Activity: 2086
Merit: 4318
When did you create this wallet on blockchain.info? Did you create it recently (last couple of weeks)... or have you been using it for some time (over a year)?
newbie
Activity: 10
Merit: 1
It does not work .. nothing goes ... I'm desperate .. Sad Angry
legendary
Activity: 3374
Merit: 3095
BTC price road to $80k
Your IP doesn't influence with your wallet addresses. If you logged to the right wallet, the address should be valid and the transaction should show up.

OP, are you sure that you own this address? Did you double check in the "Receive" tab when sending it to whoever sent you the coins? Maybe your computer is infected with a Clipboard Hijacker that changes the address in your clipboard to the hacker's one?
I think even he is infected with clipboard Hijacker or something, since he said he use the "bitcoin address request" he should receive a notification with pending request to pay the amount of bitcoin that he ask.

I think the wrong here if he actually owns the bitcoin address he should receive it.
I'm pretty sure I owned this address, I don't know if I was hacked.

Could you try to re-login again with incognito mode and try.
What I see here is that you pasted a wrong payment request link? I tried to use the request payment from blockchain and I tried to use the giving link but it didn't work.

Look at this image below this is what I'm talking about you use?
newbie
Activity: 10
Merit: 1
I'm pretty sure I owned this address, I don't know if I was hacked.
legendary
Activity: 2758
Merit: 6830
Your IP doesn't influence with your wallet addresses. If you logged to the right wallet, the address should be valid and the transaction should show up.

OP, are you sure that you own this address? Did you double check in the "Receive" tab when sending it to whoever sent you the coins? Maybe your computer is infected with a Clipboard Hijacker that changes the address in your clipboard to the hacker's one?
newbie
Activity: 10
Merit: 1
I used Ip unique, but it expired and I used another one after that. I created the wallet at official site blockchain..
legendary
Activity: 3374
Merit: 3095
BTC price road to $80k
The transaction was made on July 4, xpub6BqZb75b73yVa7ggtoeVAmUXQG17G2Vb4ews5NkQh8pEqXPobBzB1r16uUZ9oyXjUyLSWFMo7yH LZuj98mvToSiCAzFC1ZemUcXdX3c58KH , but don't show the transaction..
I created the wallet at www [Suspicious link removed] ..
Can you pm me the exact website where you make a bitcoin wallet it's always suspicious link on my side.
And could clarify this (I used the "bitcoin address request" to get a bitcoin)

I hope that you are using a unique IP or Proxy not a shared Proxy because there is possibility that someone can remotely paste other bitcoin address when sending bitcoin.
newbie
Activity: 10
Merit: 1
The transaction was made on July 4, xpub6BqZb75b73yVa7ggtoeVAmUXQG17G2Vb4ews5NkQh8pEqXPobBzB1r16uUZ9oyXjUyLSWFMo7yH LZuj98mvToSiCAzFC1ZemUcXdX3c58KH , but don't show the transaction..
I created the wallet at www [Suspicious link removed] ..
copper member
Activity: 2856
Merit: 3071
https://bit.ly/387FXHi lightning theory
How long ago did you send that transaction? Considering the last transaction to that address was about 7-8 days ago?

Can you share your extended public key so I can have a look and see what's there.

Also, how trusted is your VPN, is there a chance they could have redirected you to a different site to steal the money?
newbie
Activity: 10
Merit: 1
I used the "bitcoin address request" to get a bitcoin, I used a proxy, and after a few hours the proxy expired and my laptop has restarted, I used another proxy, and when IP changed and I logged back into my wallet, it generated another address bitcoin request, and the funds received on the previously generated address are no longer recognized by my wallet..
(https://www.[Suspicious link removed]/btc/address/13D6FEsc8oJ4ynJD7hL52CM1GPzKp8YZh4) , this is adress generated first time, and the btc is there. block explorer shows that the funds arrived at the address specified as expected, but the transaction does not appear in my Blockchain wallet’s transaction history.

My wallet don't show me the adress (13D6FEsc8oJ4ynJD7hL52CM1GPzKp8YZh4) at "Used Addresses" , don't show me the transaction at  "Extended Public Key", why if this adress has generated from my wallet?  Huh Huh
Jump to: