Quote from: pedrog on March 30, 2017, 08:29:07 AM

Quote from: slowdays on March 30, 2017, 05:59:45 AM

Hello , i have been experiencing issue with my wallets , i was trying to find some help here , unfortunately 24hours after i registered here and downloaded couple softwares like Bitcoin find and Recovery , my poloniex wallet was cleaned and my all multibit wallets emptied tonight . Something is going on in this forum.

Can you show where you find said software?

You shouldn't download and install random programs you find in the Internet, now you know what happens if you do...

He says here it was either an openssl windows binary I posted a link to, or some new software that claims to enhance the btcrecover software. If you could evaluate whether either of those programs is malicious it would help prevent others getting hacked. I made a post explaining why I think the openssl binary I recommended is clean here. The TLDR is that file is from a site referenced by the openssl website. There have been no other complaints about it, or its creators who have been distributing binaries since 2003, and a virustotal scan of it is clean.

I made another post explaining that I recommended trying software called btcrecover, but not the new software the OP tried here. You can find a quote from the creator of the new software the OP installed at the bottom of that post. His software's called "Bitcoin find & recover", not btcrecover.

I feel sorry for the OP as he says he got hacked straight after I posted a solution for how to recover 17 Bitcoins from his corrupt multibit wallet file here. If you, or anyone you know, could identify any malicious software you could help stop others losing their coins.

edit

The "Bitcoin find & recover" software's github's been deleted, which strongly suggests that software was malicious, not the openssl installer binary I posted a link to.

Quote from: HCP on March 31, 2017, 12:54:07 AM

It would seem that the "Bitcoin Find and Recover" github has been deleted (removed?)... The entire "Alex-Jaeger" account seems to have disappeared from Github... so I suspect that it is indeed the culprit. My instinct is telling me that the guy managed to steal some wallets and has deleted the github before people find the exploits in the the code...

The OpenSSL binary you linked is relatively trustworthy as HI-TEC99 has thoroughly illustrated. I have used it myself without issue.

It looks like looks like racezefi has indeed got hold of some wallets Sad

Sorry for you loss, but hopefully this will serve as a reminder for people that they need to be ULTRA paranoid about running software that does anything related to their bitcoins/wallets/private keys... if you didn't check the code and compile it yourself, but choose to run precompiled binaries, you are potentially exposing yourself to the loss of all of your coins! Undecided