scam address : 19ZM2pjq6U4jVb283GZkCPNukjeyb2YZ2u

enhu

legendary

Activity: 2492

Merit: 1018

Quote from: txbtc on January 17, 2016, 07:22:11 AM

Whenever I copy anything and paste this address gets pasted and make me loose money !

Please help me what to do and anyone else felt same ?

how did you get the address and why were you copy pasting it by the way?

that is sure a good way to steal btc. must be a very pro theif

allyouracid

legendary

Activity: 2328

Merit: 1292

Encrypted Money, Baby!

If it's encrypted, the attacker would also need the passphrase, which is another hurdle to overcome. The clipboard thingy makes sense, from an attacker's point of view.

coinableS: agree. One small script which does the check and you have certainty if it's a BTC address.

GoldSeal

legendary

Activity: 1862

Merit: 1002

Why even bother with the clipboard trick. If they have a process running with permissions to alter the clipboard, why not just steal the wallet.dat ? This seems strange to me

coinableS

legendary

Activity: 1442

Merit: 1186

Quote from: allyouracid on January 18, 2016, 08:22:48 AM

Bitcoin addresses have a certain length. If the clipboard happens to contain a string of that length, it gets replaced.
The virus could also check what software/website anything is supposed to be pasted into, and if it's BTC related, the address gets replaced.

Tons of possibilities which Windoze systems offer in those regards.

.edit:
The attacker could also implement a check if whatever is in the clipboard is a valid BTC address. It's easy to code. Same technology which tells you if the address you're sending to is valid, in your wallet software.

Since some addresses are longer/shorter than others I'd suspect more so the latter. The script could verify the checksum to verify if it's a BTC address.

farhadexchange1

newbie

Activity: 4

Merit: 0

Quote from: txbtc on January 17, 2016, 07:22:11 AM

Whenever I copy anything and paste this address gets pasted and make me loose money !

Please help me what to do and anyone else felt same ?

hey , it is A viruse , it attached to clipboard and change your bit address , you must update your anti virus , i have your same problem and loss 2 BTC Angry

allyouracid

legendary

Activity: 2328

Merit: 1292

Encrypted Money, Baby!

Bitcoin addresses have a certain length. If the clipboard happens to contain a string of that length, it gets replaced.
The virus could also check what software/website anything is supposed to be pasted into, and if it's BTC related, the address gets replaced.

Tons of possibilities which Windoze systems offer in those regards.

.edit:
The attacker could also implement a check if whatever is in the clipboard is a valid BTC address. It's easy to code. Same technology which tells you if the address you're sending to is valid, in your wallet software.

GannickusX

hero member

Activity: 490

Merit: 500

If that's really the case, this is a clever way to steal bitcoins but I don't know, how does the virus actually know when to paste the scam address or is it getting pasted every time you copy paste something?

twister

hero member

Activity: 672

Merit: 502

Quote from: Melech on January 17, 2016, 12:51:46 PM

Quote from: twister on January 17, 2016, 08:03:54 AM

Quote from: txbtc on January 17, 2016, 07:22:11 AM

Whenever I copy anything and paste this address gets pasted and make me loose money !

Please help me what to do and anyone else felt same ?

Your computer is infected. Move your wallet to a safer place then format the partition and re-install the OS. After that its best if you make another wallet and move your funds their because this one is most probably compromised.

Quote from: james.lent on January 17, 2016, 07:53:33 AM

Dont quite get what you're saying here. Where's the scam accusation ?

I think what he's trying to say is that the owner of this address is trying to scam as whenever he copy pastes any address, this one gets copied into the clipboard instead of the one he intends to.

But yeah, he doesn't have enough information for a scam accusation and this should be regarded as warning or asking for help?

Looking at the blockchain for this wallet makes it look suspicious... tons of small amounts pouring in over the past 3 months... looks like they may have a virus going around...

The address contains more than 4 btc currently and has received 35 in total till now. Couldn't find anything but it is listed here as Bitcoin ATM at Dallas, TX, USA.

https://localbitcoins.com/ad/300690/bitcoin-atm-dallas-tx-usa
https://archive.is/VLcj6

Melech

sr. member

Activity: 406

Merit: 250

Quote from: twister on January 17, 2016, 08:03:54 AM

Quote from: txbtc on January 17, 2016, 07:22:11 AM

Whenever I copy anything and paste this address gets pasted and make me loose money !

Please help me what to do and anyone else felt same ?

Your computer is infected. Move your wallet to a safer place then format the partition and re-install the OS. After that its best if you make another wallet and move your funds their because this one is most probably compromised.

Quote from: james.lent on January 17, 2016, 07:53:33 AM

Dont quite get what you're saying here. Where's the scam accusation ?

I think what he's trying to say is that the owner of this address is trying to scam as whenever he copy pastes any address, this one gets copied into the clipboard instead of the one he intends to.

But yeah, he doesn't have enough information for a scam accusation and this should be regarded as warning or asking for help?

Looking at the blockchain for this wallet makes it look suspicious... tons of small amounts pouring in over the past 3 months... looks like they may have a virus going around...

james.lent

hero member

Activity: 602

Merit: 501

Quote from: twister on January 17, 2016, 08:03:54 AM

I think what he's trying to say is that the owner of this address is trying to scam as whenever he copy pastes any address, this one gets copied into the clipboard instead of the one he intends to.

But yeah, he doesn't have enough information for a scam accusation and this should be regarded as warning or asking for help?

Should be moved to meta.

OP best to do a full format of your pc.

twister

hero member

Activity: 672

Merit: 502

Quote from: txbtc on January 17, 2016, 07:22:11 AM

Whenever I copy anything and paste this address gets pasted and make me loose money !

Please help me what to do and anyone else felt same ?

Your computer is infected. Move your wallet to a safer place then format the partition and re-install the OS. After that its best if you make another wallet and move your funds their because this one is most probably compromised.

Quote from: james.lent on January 17, 2016, 07:53:33 AM

Dont quite get what you're saying here. Where's the scam accusation ?

I think what he's trying to say is that the owner of this address is trying to scam as whenever he copy pastes any address, this one gets copied into the clipboard instead of the one he intends to.

But yeah, he doesn't have enough information for a scam accusation and this should be regarded as warning or asking for help?

james.lent

hero member

Activity: 602

Merit: 501

Dont quite get what you're saying here. Where's the scam accusation ?

txbtc

hero member

Activity: 499

Merit: 500

when i serch internet : http://www.reacttant.com/r/AlphaBay/comments/3vji9x/clue_of_the_lost_bitcoins

txbtc

hero member

Activity: 499

Merit: 500

Whenever I copy anything and paste this address gets pasted and make me loose money !

Please help me what to do and anyone else felt same ?

Topic: scam address : 19ZM2pjq6U4jVb283GZkCPNukjeyb2YZ2u (Read 1228 times)