Pages:
Author

Topic: no trace of BTC funds in my electrum wallet (Read 324 times)

copper member
Activity: 2856
Merit: 3071
https://bit.ly/387FXHi lightning theory
April 18, 2018, 11:20:38 AM
#29

If you have the backup of your seed phrase from electrum you can import it to other wallet providers.

You can use the electrum wallet for Android as your temporary wallet.

Here, we can verify if your electrum wallet from your PC or laptop is infected or fake.
To be safe I put the link of electrum wallet for android here http://download.electrum.org/3.1.2/Electrum-3.1.2.0-release.apk
then import your seed phrase from your wallet that includes the bitcoin address where you sent your bitcoin from coinbase.

Hope this time you can see the transaction history and balance of your wallet.


I'd advise extreme caution in using the same seed phrase. If I had as many viruses as you, i'd consider the seed to be exposed and would start again with a brand new seed. Obviously, move the old coins into your new wallet.

This is the main link for the android electrum from the google play: https://play.google.com/store/apps/details?id=org.electrum.electrum

The official electrum website may be safer but you need to remember to uncheck the trusted sources option in your regular android settings.

You should both have a little better reading before you post such nonsense.OP is lost his coins due to malware which is change his receive address or he have download fake Electrum wallet.Since he have only one transaction from Coinbase,and there is 3 more transaction which he claims to not belong to him,it is obvious that there are more victims of this malware.

That makes no sense to import seed anywhere(although may try to be 100% safe),and to move any coins anywhere since his wallet balance is 0.


Only thing to do is formating hard disk/clean install of OS and and using antivirus+firewall with the addition of extra malware protection-of course, with the dose of common sense.


Sorry, did he say he sent "ALL" the funds? I didn't spot somewhere where it said that. He also posted this address 1QYBTf2tDgyzc6GA8w4ycef7HjWoPgk6j.
Meanwhile one slight issue with a post doesn't throw the entire post into disrepute?

Look at what Bob said to see what I was trying to convey. To get a virus that bad means that the seed is probably exposed (i'd say it's likely it's been exposed).
and Ive been trying to open command prompt for a good couple hours it keeps closing itself Im trying to fix it.
If you have the backup of your seed phrase from electrum you can import it to other wallet providers.

You can use the electrum wallet for Android as your temporary wallet.

Here, we can verify if your electrum wallet from your PC or laptop is infected or fake.
To be safe I put the link of electrum wallet for android here http://download.electrum.org/3.1.2/Electrum-3.1.2.0-release.apk
then import your seed phrase from your wallet that includes the bitcoin address where you sent your bitcoin from coinbase.

Hope this time you can see the transaction history and balance of your wallet.

I'd advise extreme caution in using the same seed phrase. If I had as many viruses as you, i'd consider the seed to be exposed and would start again with a brand new seed. Obviously, move the old coins into your new wallet.

This is the main link for the android electrum from the google play: https://play.google.com/store/apps/details?id=org.electrum.electrum

The official electrum website may be safer but you need to remember to uncheck the trusted sources option in your regular android settings.

The seed should be fine, if it was only a clipboard Malware attack? Huh These attacks detect when you copied a Bitcoin address and replace it with the hackers address, right?

Most people never use their clipboard when they generate their seed for the first time.  Roll Eyes I know I write it down and type it in when I have to verify it.   Roll Eyes

This is exactly why I never use large amounts of coins on these wallets and why I do a small test transaction, before I send the coins that I wanted to send in the first place.


He did something to get the virus, whatever it was, he should consider everything on the computer that can't be scanned for a virus to be compromised data. Any exposed private keys/seeds should not be reused.
legendary
Activity: 3234
Merit: 5637
Blackjack.fun-Free Raffle-Join&Win $50🎲

If you have the backup of your seed phrase from electrum you can import it to other wallet providers.

You can use the electrum wallet for Android as your temporary wallet.

Here, we can verify if your electrum wallet from your PC or laptop is infected or fake.
To be safe I put the link of electrum wallet for android here http://download.electrum.org/3.1.2/Electrum-3.1.2.0-release.apk
then import your seed phrase from your wallet that includes the bitcoin address where you sent your bitcoin from coinbase.

Hope this time you can see the transaction history and balance of your wallet.


I'd advise extreme caution in using the same seed phrase. If I had as many viruses as you, i'd consider the seed to be exposed and would start again with a brand new seed. Obviously, move the old coins into your new wallet.

This is the main link for the android electrum from the google play: https://play.google.com/store/apps/details?id=org.electrum.electrum

The official electrum website may be safer but you need to remember to uncheck the trusted sources option in your regular android settings.

You should both have a little better reading before you post such nonsense.OP is lost his coins due to malware which is change his receive address or he have download fake Electrum wallet.Since he have only one transaction from Coinbase,and there is 3 more transaction which he claims to not belong to him,it is obvious that there are more victims of this malware.

That makes no sense to import seed anywhere(although may try to be 100% safe),and to move any coins anywhere since his wallet balance is 0.


Only thing to do is formating hard disk/clean install of OS and and using antivirus+firewall with the addition of extra malware protection-of course, with the dose of common sense.
legendary
Activity: 1624
Merit: 2481
The seed should be fine, if it was only a clipboard Malware attack? Huh These attacks detect when you copied a Bitcoin address and replace it with the hackers address, right?

If OP's PC is only infected with a clipping malware, yes. The seed should be fine.
But due to the fact that he can't open the command line (closing automatically), he probably does not only have a clipping- , but a more dangerous malware.

With what kind of malware his pc got infected can only be said after fastidiously inspecting his computer.

I would definetely also recommend to use a new seed. Better safe than sorry.
legendary
Activity: 3542
Merit: 1965
Leading Crypto Sports Betting & Casino Platform
and Ive been trying to open command prompt for a good couple hours it keeps closing itself Im trying to fix it.
If you have the backup of your seed phrase from electrum you can import it to other wallet providers.

You can use the electrum wallet for Android as your temporary wallet.

Here, we can verify if your electrum wallet from your PC or laptop is infected or fake.
To be safe I put the link of electrum wallet for android here http://download.electrum.org/3.1.2/Electrum-3.1.2.0-release.apk
then import your seed phrase from your wallet that includes the bitcoin address where you sent your bitcoin from coinbase.

Hope this time you can see the transaction history and balance of your wallet.

I'd advise extreme caution in using the same seed phrase. If I had as many viruses as you, i'd consider the seed to be exposed and would start again with a brand new seed. Obviously, move the old coins into your new wallet.

This is the main link for the android electrum from the google play: https://play.google.com/store/apps/details?id=org.electrum.electrum

The official electrum website may be safer but you need to remember to uncheck the trusted sources option in your regular android settings.

The seed should be fine, if it was only a clipboard Malware attack? Huh These attacks detect when you copied a Bitcoin address and replace it with the hackers address, right?

Most people never use their clipboard when they generate their seed for the first time.  Roll Eyes I know I write it down and type it in when I have to verify it.   Roll Eyes

This is exactly why I never use large amounts of coins on these wallets and why I do a small test transaction, before I send the coins that I wanted to send in the first place.

copper member
Activity: 2856
Merit: 3071
https://bit.ly/387FXHi lightning theory
and Ive been trying to open command prompt for a good couple hours it keeps closing itself Im trying to fix it.
If you have the backup of your seed phrase from electrum you can import it to other wallet providers.

You can use the electrum wallet for Android as your temporary wallet.

Here, we can verify if your electrum wallet from your PC or laptop is infected or fake.
To be safe I put the link of electrum wallet for android here http://download.electrum.org/3.1.2/Electrum-3.1.2.0-release.apk
then import your seed phrase from your wallet that includes the bitcoin address where you sent your bitcoin from coinbase.

Hope this time you can see the transaction history and balance of your wallet.

I'd advise extreme caution in using the same seed phrase. If I had as many viruses as you, i'd consider the seed to be exposed and would start again with a brand new seed. Obviously, move the old coins into your new wallet.

This is the main link for the android electrum from the google play: https://play.google.com/store/apps/details?id=org.electrum.electrum

The official electrum website may be safer but you need to remember to uncheck the trusted sources option in your regular android settings.
legendary
Activity: 3472
Merit: 3217
Playbet.io - Crypto Casino and Sportsbook
and Ive been trying to open command prompt for a good couple hours it keeps closing itself Im trying to fix it.
If you have the backup of your seed phrase from electrum you can import it to other wallet providers.

You can use the electrum wallet for Android as your temporary wallet.

Here, we can verify if your electrum wallet from your PC or laptop is infected or fake.
To be safe I put the link of electrum wallet for android here http://download.electrum.org/3.1.2/Electrum-3.1.2.0-release.apk
then import your seed phrase from your wallet that includes the bitcoin address where you sent your bitcoin from coinbase.

Hope this time you can see the transaction history and balance of your wallet.
HCP
legendary
Activity: 2086
Merit: 4363
I tried to copy and paste the code you just put up and it came up with the same receive ID that I sent my btc to have I been conned? D:
Sadly yes... your computer has been infected. Your BTC is now gone and your chances of getting it back are practically zero Undecided

Do as the others suggested...scan your computer for malware (I'd recommend "Malware Bytes" and "Spybot Search and Destroy")... Although, in all honesty, I would suggest that you back up important data (pics, documents, wallet files etc)... and then reformat your PC and reinstall the OS from scratch.

A lot of modern malware can be VERY difficult to remove completely and the process can take hours... so the full re-install may be a faster option to get up and running again.
newbie
Activity: 42
Merit: 0
Have you tried these commands in Electrum console:
listaddresses() , ismine(YOUR_ADDRESS) and getbalance()
first command shows to you both "change" and "receiving" addresses.
Do you use this address: "1QYBTf2tDgyzc6GA8w4ycef7HjWoPgk6j" from your Electrum seed words? Are you sure?
copper member
Activity: 2856
Merit: 3071
https://bit.ly/387FXHi lightning theory
I tried to copy and paste the code you just put up and it came up with the same receive ID that I sent my btc to have I been conned? D:
and Ive been trying to open command prompt for a good couple hours it keeps closing itself Im trying to fix it.


This indicates that you have a clipping malware which also does restrict your access to the OS (therefore the automatic exit command when starting the command line).

You should do what Xynerise suggested (backing up important data and format your drive) as soon as possible!

It is NOT necessary to install a unix OS. Windows is fine. You just have to take the right security precautions.

1) Install a good AV
2) Never download any suspicious files
3) Keep away from torrents and cracked software, etc..

If possible, when backing up or doing anything else on your computer, boot it in "safe mode" (this should interfere in the running/boot of viruses while in that mode). Or at the least hitting fn+F4 to disable WiFi and other wireless communications (or do it from the mobility centre).

You can pick up a good cheap antivirus by searching what you want (don't buy directly from the site if you don't have to).

Once you have your backups, backup the backup and run an av scan on the backup. Don't restore from a backup before a virus scan is done if you know you have one!

Finally, don't go to shady sites or click ad links when you don't know where they'll take you... A browser like Firefox will show you the link you're hovering over before you click it. You may also want to try Tor for shady links if you really want to use them as it offers a bit more protection than a regular browser.
legendary
Activity: 1624
Merit: 2481
I tried to copy and paste the code you just put up and it came up with the same receive ID that I sent my btc to have I been conned? D:
and Ive been trying to open command prompt for a good couple hours it keeps closing itself Im trying to fix it.


This indicates that you have a clipping malware which also does restrict your access to the OS (therefore the automatic exit command when starting the command line).

You should do what Xynerise suggested (backing up important data and format your drive) as soon as possible!

It is NOT necessary to install a unix OS. Windows is fine. You just have to take the right security precautions.

1) Install a good AV
2) Never download any suspicious files
3) Keep away from torrents and cracked software, etc..
sr. member
Activity: 322
Merit: 363
39twH4PSYgDSzU7sLnRoDfthR6gWYrrPoD
I tried to copy and paste the code you just put up and it came up with the same receive ID that I sent my btc to have I been conned? D:
Yes, that means you have a clipboard malware that changes any BTC address you copy to your clipboard to one of the hacker.

Do a full scan of your system with Malwarebytes -- or better still, backup your important filesz wipe the hard drive and install a *Unix OS.
newbie
Activity: 7
Merit: 0
and Ive been trying to open command prompt for a good couple hours it keeps closing itself Im trying to fix it.
newbie
Activity: 7
Merit: 0
I tried to copy and paste the code you just put up and it came up with the same receive ID that I sent my btc to have I been conned? D:
HCP
legendary
Activity: 2086
Merit: 4363
I've got 3 different wallets I've checked them all they have all come back false D:
Where did you get this "receive ID" from? 1QYBTf2tDgyzc6GA8w4ycef7HjWoPgk6j? Huh

That is the address that you say you got from Electrum:
... I copy and pasted my receive ID from coin base on to note pad then the same one from my actual electrum wallet directly underneath it to compare all the characters and they're identical.
How did you get this "receive ID" from Electrum? Huh

If you copy pasted it from Electrum... it should be displayed in Electrum somewhere... can you take a screenshot of where you got it from?

If you cannot see "1QYBTf2tDgyzc6GA8w4ycef7HjWoPgk6j" anywhere in Electrum, it is possible that you have the "clipboard virus" that alters bitcoin addresses when you try to use copy/paste... As a test, try and copy/paste this address: 1P7S8HoyxjExFFgaGhBkYXhtJhoxe1bNWp into Notepad... see if it displays the correct address.
legendary
Activity: 1624
Merit: 2481
Can you check wether you have the correct version of electrum (non-malicious)?

The best would be to check the signature, but using a checksum should be fine too.


Do the following:
  • Press WIN-key + R
  • Type in: cmd
  • Run this command: certutil -hashfile C:\path\to\electrum.exe sha256 (Use the path to (1) the electrum installer or (2) the standalone executable (depending on what you are using))
  • Compare the output to the hashes below


Hash of the portable version:
Code:
d42391fe8069be5ebfab9d3e1e4f4f8dbd0e36d80bc841677d76359510e22b6e

Hash for the installer:
Code:
ab82319dff3bef0604fe173d45d94e3ede7dc3947d41ce59976a0b07c0357c71
newbie
Activity: 7
Merit: 0
I've got 3 different wallets I've checked them all they have all come back false D:
newbie
Activity: 2
Merit: 0
 Smiley
legendary
Activity: 1624
Merit: 2481
the ismine command came back false?

This is weird.
This means this address is not part of your wallet.

Did you somehow (maybe by accident) create a second wallet file?

And since you have already received 4 payments to your address, did they at any moment show up in electrum?

Did you download electrum from the official site (https://electrum.org/)?

newbie
Activity: 7
Merit: 0
the ismine command came back false?
legendary
Activity: 1624
Merit: 2481
Your address: https://blockchain.info/address/1QYBTf2tDgyzc6GA8w4ycef7HjWoPgk6j

shows a balance of just over 0.25 BTC... received in 4 transactions

*0.025 BTC





OP, can you check the 'Address'-tab (relatively at the top of electrum) and check wether the address appears in there.
You might also try to use the console-tab (if not visible: 'View' -> 'Show Console') and type in: listunspent().

This should show 'all' of your UTXO's (in your case: you should see address 1QYBTf2tDgyzc6GA8w4ycef7HjWoPgk6j with your balance).
What is the output of the command?

You can also try to type ismine("1QYBTf2tDgyzc6GA8w4ycef7HjWoPgk6j"). This should return true.
Pages:
Jump to: