Post
Topic
Board Announcements (Altcoins)
Re: [ANN] BTCtalkcoin [TALK] - Pure POS - Multipool Ready! - AirDrop Coming Soon
by
hypersire
on 23/05/2014, 16:37:04 UTC
Upload wallet https://www.dropbox.com/sh/qfsqwa6p95sqia2/AABP874l05kZGSNSHFjF3kf0a

You can also download the mega, but need to install the add-on / extension of the mega in firefox and google chrome.


Here is a sandboxie report of the file posted here, looks suspicious to me, strange network connections and attempt to install itself in system startup is not right. I would wait until someone trusted confirms the MD5 of this file against the original 1.5.2 i am still running 1.5.0 so cant check here.

https://malwr.com/analysis/N2E4YWY0M2M5NzUxNDU4YTkzZmQzZmM3ZTZmZTQ5ODk/

As far as I know it only offers the option of being autorun at startup. In the options menu of all the QT wallets, that option is there. But I don't really know tbh. I am not a C++ programmer.


Yeah i am aware of that but this seems to add itself to startup on the first run, i have also checked the first ip from the report the irc one which seems to have also been used in a few qt wallets posted before and in a multibit wallet that somebody had downloaded, links below. None of these files should be connecting to a irc host and even stranger the same one. Am nearly 100% sure now that this is binded with somekind of irc botnet, like PlasmaIRC bot or similar, am still waiting for someone to confirm the checksums against the official 1.5.2 software which will confirm it as i am sure they wont match.

http://www.herdprotect.com/ip-address-62.210.131.147.aspx
https://bitcointalk.org/index.php?topic=448262.0

Is the same file that i downloaded yesterday's mega


Ok yep i will be the first to say i was wrong and am sorry for doubting your link, but can never be to careful when it comes to crypto and a link posted by a new account as a first post is always going to be suspicious.

I have managed to download the offcial 1.5.2 from the first post and the checksums match, so it is 100% the same file on the dropbox link as the one in the op.



Thanks for the fresh upload and verification guys!