Quote from: leepsteer000 on December 17, 2017, 11:57:18 PM

Quote from: HCP on December 17, 2017, 09:51:35 AM

Quote from: leepsteer000 on December 17, 2017, 09:11:12 AM

guys im not infected. i never downloaded anything unknown. that client downloaded from the site itself

Huh? you mean Electrum Auto downloaded and installed itself? Huh

if so, then it definitely sounds like you got a scam version. Electrum has NEVER had an autodownload or update feature that I'm aware of... That sounds highly suspicious to me.

Quote from: leepsteer000 on December 17, 2017, 09:11:12 AM

and noone know that i have btc so i believe its a bug or anyhthing like that
when i tried to increase fess for last transactions money gone.

No one needs to know if you have BTC or not... if you're running a scam version of the software, the hackers don't need to know who you are or where you live. They'll have your private keys.

Just because nothing happened for a while doesn't mean your wallet wasn't compromised. They may have been waiting for big deposit or for BTC value to increase etc.

I very much doubt that there there is a bug in the wallet so big that it autosends coins to some random address... that's a ridiculous claim. The more likely answer is either your wallet got compromised by something you did (claimed any fork coins lately? exported your private keys? typed something into a website?) or by a scam version of the wallet.

Have you confirmed the digital signature of the file you downloaded and installed?

i mean i downloaded the wallet from here
https://electrum.org/#home

Its not infected i did not fork or did anything. noone knows about my private keys.
nothing and i never download anything it was new pc
i only downloaded this wallet and bitcoin core wallet. nothing less nothing more

There is only one way to know if your Electrum is authentic and that is to verify the digital signature of the file, even if downloaded from the original source it can be infected.
There are many ways, like host-redirect to phishing webpage, compromised server....etc.

Two important factors here that lead us to believe your Electrum is malicious:
1. Unknown change address.
2. Script monitoring compromised change addresses and auto-forward to another address.

If you check the file signature, we can at least confirm/disconfirm our suspicions.