Pages:
Author

Topic: 【Resolved - Thanks all for helping me out】WARNING!!! - Is bitcointalk hacked? (Read 1425 times)

legendary
Activity: 1596
Merit: 1005
★Nitrogensports.eu★
Wow. I did not realize that this kinds of viruses are able to infect your system. Thanks for the warning. Gotta be careful now with that.
sr. member
Activity: 602
Merit: 252
I want to test the forth times here to make sure I really resolve my problem.

I want to post the bitcoin address starting with '152o' here: 152oBitoBwHwxR5UpUQnsvWSFjYHkheDJk

Please don't forget to add "[RESOLVED]" to your post title!  Wink

Yes, thanks for your reminding. I added the RESOLVED in the title.
legendary
Activity: 1176
Merit: 1011
Always use Firefox with NoScript.
That's just undoable, imho. Pretty most every modern website out there needs JavaScript to function normally.

Especially for novice users, who don't have a clue what JavaScript is or when they would (not) need it, NoScript is just not an option.
legendary
Activity: 2044
Merit: 1055
I want to test the forth times here to make sure I really resolve my problem.

I want to post the bitcoin address starting with '152o' here: 152oBitoBwHwxR5UpUQnsvWSFjYHkheDJk

Please don't forget to add "[RESOLVED]" to your post title!  Wink
sr. member
Activity: 602
Merit: 252
Thank you all guys, I am fine now. Everything works well now. I removed all chrome extensions, and I promise that I will never add any extensions in the future. BTW, the extensions were added just a few months ago, after that I never add any other extensions.

I think it would be the peercoin ticker in my chrome browser.

Everyone, again here is my really bitcoin address starting with '152o': 152oBitoBwHwxR5UpUQnsvWSFjYHkheDJk

 Wink
sr. member
Activity: 602
Merit: 252
I want to test the forth times here to make sure I really resolve my problem.

I want to post the bitcoin address starting with '152o' here: 152oBitoBwHwxR5UpUQnsvWSFjYHkheDJk
legendary
Activity: 1274
Merit: 1004
May be it is a chrome ticker. When I paste the bitcoin address in the text file and save it, evetything is fine. But when I post in this forum via chrome browser, it will change.

Test again, I want to post the address start with '152o' - 152oBitoBwHwxR5UpUQnsvWSFjYHkheDJk
yes

Remove live ticker if you are using it in chrome/ff

You can see this address (14P13dbPC8wktib8NBD3zhUCiVgrdEn1tw)  here.
http://pastebin.com/UuvLSeft  

http://www.reddit.com/r/Bitcoin/comments/1qdgag/a_horrible_thought_i_just_had/

Don't forget to post link of that ticker addon here, so we can report it to chrome market and warn other users.
sr. member
Activity: 602
Merit: 252
Right now, I removed all chrome extensions, it seems everything works good.

Test the third time, I want to paste the bitcoin address here start with '152o' - 152oBitoBwHwxR5UpUQnsvWSFjYHkheDJk
sr. member
Activity: 602
Merit: 252
May be it is a chrome ticker. When I paste the bitcoin address in the text file and save it, evetything is fine. But when I post in this forum via chrome browser, it will change.

Test again, I want to post the address start with '152o' - 152oBitoBwHwxR5UpUQnsvWSFjYHkheDJk
member
Activity: 94
Merit: 10
I am scanning my computer right now. But no virus found, everything looks fine right now? Why?

Test - I am going to post BTC address start with '152o':

14P13dbPC8wktib8NBD3zhUCiVgrdEn1tw

No gosh, change again!!!!!!!!!!!!!!!
I have had the same problem for 3 month ago and had not solve it still..In my case,as i think, viruses are in some wallets of forks which i have installed at my home computer..
legendary
Activity: 1876
Merit: 1295
DiceSites.com owner
  • Open notepad and copy&paste an address there.
    • Still same problem? Not the problem of bitcointalk, virus on your computer.
    • Problem gone? Try same on another site in same browser.
      • Still same problem? Not the problem of bitcointalk, probably some browser extension.
      • Problem gone? wtf.


Basically I am trying to say, isolate the problem and find the cause that way.


That browser extension sounds most likely atm.
sr. member
Activity: 910
Merit: 253
So many fraud in bitcoin industry nowadays..Even don't know how to secure my digital currency..About 1 bitcoin was stolen from my home computer, even now i don't know what was that..Very smart viruses today, i have checked my system many time but it was stolen and stolen again..

Sometimes, Antiviruses are unable to detect malware as hackers use crypters to make their trojans,viruses fully undetectable from av's. So if you are unable to find any infection, best method is to take help from experianced users or in worst case, backup your data and reinstall windows or Ubuntu etc.

backup wallet, ensure you can get it up and going in another client on a laptop or another system you own.

reinstall OS.
member
Activity: 94
Merit: 10
So many fraud in bitcoin industry nowadays..Even don't know how to secure my digital currency..About 1 bitcoin was stolen from my home computer, even now i don't know what was that..Very smart viruses today, i have checked my system many time but it was stolen and stolen again..

Sometimes, Antiviruses are unable to detect malware as hackers use crypters to make their trojans,viruses fully undetectable from av's. So if you are unable to find any infection, best method is to take help from experianced users or in worst case, backup your data and reinstall windows or Ubuntu etc.
You are right those are very smart viruses!Thank you for advices!
legendary
Activity: 2044
Merit: 1055
I am scanning my computer right now. But no virus found, everything looks fine right now? Why?

Test - I am going to post BTC address start with '152o':

14P13dbPC8wktib8NBD3zhUCiVgrdEn1tw

No gosh, change again!!!!!!!!!!!!!!!

You need to do a "clean boot" to detect any viruses with stealth mechanism.

Download a linux boot cd iso file, burn, boot and scan!

Avira rescue system: http://www.avira.com/en/download/product/avira-rescue-system
legendary
Activity: 1274
Merit: 1004
Remove live ticker if you are using it in chrome/ff

You can see this address (14P13dbPC8wktib8NBD3zhUCiVgrdEn1tw)  here.
http://pastebin.com/UuvLSeft 
legendary
Activity: 1274
Merit: 1004
So many fraud in bitcoin industry nowadays..Even don't know how to secure my digital currency..About 1 bitcoin was stolen from my home computer, even now i don't know what was that..Very smart viruses today, i have checked my system many time but it was stolen and stolen again..

Sometimes, Antiviruses are unable to detect malware as hackers use crypters to make their trojans,viruses fully undetectable from av's. So if you are unable to find any infection, best method is to take help from experianced users or in worst case, backup your data and reinstall windows or Ubuntu etc.
sr. member
Activity: 602
Merit: 252
I am scanning my computer right now. But no virus found, everything looks fine right now? Why?

Test - I am going to post BTC address start with '152o':

14P13dbPC8wktib8NBD3zhUCiVgrdEn1tw

No gosh, change again!!!!!!!!!!!!!!!
legendary
Activity: 2044
Merit: 1055
I've read about a google chrome extension, some kind of a coin live ticker, which does such things!

 Angry Angry Angry
legendary
Activity: 2156
Merit: 1131
So many fraud in bitcoin industry nowadays..Even don't know how to secure my digital currency..About 1 bitcoin was stolen from my home computer, even now i don't know what was that..

It could be either the copy/paste virus that change the address or a hacked software like bitcoinQt or an attack in the browser with a malicious plugin.

Always check the address you copy/paste.
Only download application with a signed key to verify.
Always use Firefox with NoScript.

And you'll be fine.
member
Activity: 94
Merit: 10
Maybe I was infected, right now I am using another computer to reply this post, everything looks fine so far. I think I have to check my computer now!!!

https://www.malwarebytes.org/getmbam (Scan your pc for viruses,trojans etc )
http://downloads.malwarebytes.org/file/mbae_beta (Scan your pc for exploits )
http://downloads.malwarebytes.org/file/mbar (Scan your pc for rootkit )
Thank you very useful tools!
Pages:
Jump to: