Author

Topic: Stolen Bitcoin from wallet (Read 1146 times)

full member
Activity: 151
Merit: 100
January 15, 2014, 05:34:55 PM
#15
Slasher, most people use crypting software to make their Trojans fud (fully undetectable) from antiviruses, so it doesn't matters which av you are using.  If it's crypted it will don't get detected by any av.

NOD32 detected it because probably someone submitted that file to nod. So whenever you download something scan it on virustotal and run it in sandbox or virtual machine first. Install a firewall also, so you can keep an eye on incoming and outgoing connections.

Totaly agreed!

I personaly, have developed a program that act like a virus/trojan (totaly FUD).

Sending it to virustotal, ZERO detection.

Firewall? (As it requires admin privilegies to be installed, it creates The rules to bypass)

Antimalware? (Starting as a service, it runs before or together these kind of programs, so if it is not a known virus, my rights allow me even to disable it)

When The user opens The door, there's not much an antivirus/antiwhatever can do....

And lets clarify The others about JPG u've clicked...

If u take a JPG file and rename it to EXE, Windows wont execut it.

That file should be named file.jpg.exe (with a JPG icon, trying to fake being a JPG)

I'll not get tired to write about it every time I have The opportunity.

Remember: in The cryptocurrency world, The user is his own Bank. So, we have to know The basics...






full member
Activity: 182
Merit: 100
January 15, 2014, 08:41:18 AM
#14
I would most certainly format and re-install Windows.
legendary
Activity: 1274
Merit: 1004
January 15, 2014, 03:37:11 AM
#13
Slasher, most people use crypting software to make their Trojans fud (fully undetectable) from antiviruses, so it doesn't matters which av you are using.  If it's crypted it will don't get detected by any av.

NOD32 detected it because probably someone submitted that file to nod. So whenever you download something scan it on virustotal and run it in sandbox or virtual machine first. Install a firewall also, so you can keep an eye on incoming and outgoing connections.
newbie
Activity: 24
Merit: 0
January 14, 2014, 08:51:23 PM
#12
Finally got to the bottom of the cause....they sent link via ebay as a question asking about if they I could help them..... with link to an image...... the file was a .jpg ........once download it wasn't detected by any anti-virus or anti-malware program, I was running mcaffee

I scanned the file with both AV & other software before clicking on it to make sure it wasn't a virus....even did a full scan after clicking the file to make sure with AV & Malwarebytes

Today I used https://www.virustotal.com/ which submits the file to around 50 of the main AV scanners...... only 3 AV picked up the file as a backdoor trojan ......shocking ......NOD32 was one of them  

I'm now using NOD32 as I can't trust anything else

Be careful which AV you choose

full member
Activity: 151
Merit: 100
January 12, 2014, 09:59:56 PM
#11
Think I've worked out what's happened ....they have hacked in to the PC & installed a keylogger

Remember: if They hacked into your computer, you have probably opened The door (with an executable u've downloaded somewhere...)

Good luck!
newbie
Activity: 24
Merit: 0
January 12, 2014, 06:14:42 PM
#10
Think I've worked out what's happened ....they have hacked in to the PC & installed a keylogger
full member
Activity: 151
Merit: 100
January 12, 2014, 11:34:17 AM
#9
If it was a trojan developed specificly made to get wallets/passwords, antivirus cant mark it as a virus (at least untill this program spread and get a lot of computers.

These forums have a lot of developers with expertise enough to bulid one. I'm a developer.

Now with that said....

PLEASE BEWARE WITH USING MINERS/PROGRAMS THAT SOMEONE JUST LINK TO YOU.

If it is open source, better.

Send to virustotal doesn't mean nothing, as I said above.

Good luck!

newbie
Activity: 24
Merit: 0
January 12, 2014, 10:35:09 AM
#8
What was your address? and which wallet you are using on your pc? QT or some other?
Download some antivirus or antimalware and scan your pc first.

It's ok it wasn't my address that had changed, they have managed to get hold of my Passwords not sure how as yet, not sure the police would be able to do anything?

I have antivirus & scanned with anti-Malware

The wallet was QT

legendary
Activity: 1274
Merit: 1004
January 12, 2014, 10:32:31 AM
#7
What was your address? and which wallet you are using on your pc? QT or some other?
Download some antivirus or antimalware and scan your pc first.
newbie
Activity: 24
Merit: 0
January 12, 2014, 10:29:14 AM
#6
Not sure how as yet
member
Activity: 70
Merit: 10
January 12, 2014, 10:21:00 AM
#5
How?
newbie
Activity: 24
Merit: 0
January 12, 2014, 09:47:54 AM
#4
Local wallet on my PC Sad
sr. member
Activity: 476
Merit: 250
moOo
January 12, 2014, 09:28:00 AM
#3
offline... not much. Next time transfer to  a second wallet you dont even keep on a networked computer.. though it is more of a set of keys than a wallet as the coins exist on the blockchain and not in your actual pocket.
newbie
Activity: 24
Merit: 0
January 12, 2014, 09:23:43 AM
#2
Which wallet were you using? Online/offline?
newbie
Activity: 24
Merit: 0
January 12, 2014, 09:20:31 AM
#1
Just had 2.3 bitcoin stolen from my wallet anything I can do?
Jump to: