Malwarebytes just detected a threat and the file again is the Electrum wallet

That's the threat : https://prnt.sc/pumzht

Abdussamad, yes, the address is the same.

That's the blockchain transaction link :  https://www.blockchain.com/btc/tx/0ddca07771e20587b00a1685702f1be13c2748832fa8c835040cdc2c3001ab33

When I check the address later, I saw that the payment left the address 2 sec after it's received: https://bitref.com/1P24xfd96qvMzLN81qxNhgPn2pm8Efa5AG

If I understand the blockchain correct, the payment is sent to address : 3Ksti3jfX7Vb6FUZW4mWZbazyFcAeyjkCy   and that address isn't my address. Actually, I didn't see the payment in my wallet at all.

Lucius, no, I didn't scan the PC in safe mode, but I will do it. Thanks for the advice!

DireWolfM14, I sent the receiving address via email. This person always doing a direct btc payments to me and I always email him the address. Today I received a btc payment through my website and everything was fine. I also sent a btc payment about 20 min ago and everything was fine again.
Hope it was just a onetime problem!
But, of course, it doesn't mean that I should not protect my PC. I am thinking to format the disc, but will need time to find an info how to do that. I think also I should update the Electrum wallet, but also will need time to read how to do that.

Abdussamad, I don't have teamviewer type program and didn't use teamviewer. But I just checked the Remote Settings and saw, that "Allow Remote Assistance connections to this computer" option was enabled (I don't know why). I disabled it. Thanks for the advice!


HCP, yes, I copy-pasted (in txt) a few addresses from my Addresses list and everything was fine.
But I didn't try yet to test a direct payment to my btc wallet (to be honest, I'm afraid to do that). Maybe I should test with a small amount. But today I got a btc payment through my website and everything is fine.

HCP , no, I don't have any address that begins with ""1P24x". The sender always paying with a direct payment to my btc wallet and I always doing the same : open my wallet - go to Receive tab - copy the btc address there - paste it at the email.
I don't have problems when I receive btc payments through my website.

I didn't visit any porn/torrents websites.

About "moving your crypto/wallet stuff to a completely separate (offline) system" - I don't know how to do that and some advice will be helpful.

Thank you all for the help and advice! I really, really appreciate it.

I understand, that I lost that transaction (with the problem). But now the most important is to keep my wallet safe.

o_e_l_e_o, how to update the Electrum wallet?

I receive fund there and don't have problem, because the payments are not direct. Only this one (the missing one, with the problem) was a direct payment.
I know, that the formatting is the best solution, but will need time to find info how to do that. Until then I think to use Malwarebytes running and will update the wallet. Is that a solution for now?

Lucius, yes, I am using Electrum version 3.3.3. It seems I have "non-genuine version" of what? I downloaded the Electrum wallet from the official website a long time ago and because some problems with my previous laptop, I restored the wallet on new laptop, with the seeds.

I understand, that removing threats isn't the best solution, but just trying to find the best decision for now. Because I am worried not to lose all my btc in the wallet.
I understand, that formatting of the disk and clean install of OS is the best option, but I will need time to see how to do that, because I am not familiar with that.
That's why I am asking if the MB quarantine is a solution, until I find info about the formatting.

Thanks for the reply, o_e_l_e_o !

Yes, the wallet is downloaded from the official website.
Thanks for the advice about the reformat. I will do that for sure later in the time.

So, should I add the other 25 detections to the MalwareBytes quarantine ?

I didn't use Malwarebytes before and if I understand the info correct (because English isn't my native language), when I add a certain file or program to MalwareBytes quarantine, I will be the only one person with an access to them, correct?

Here is the image:

https://prnt.sc/ptqd3s

Sorry, I don't know how to add an image here

I just installed the free trial version of Malwarebytes and run it.  I got 26 detections. Check the image here. Should I click on "Quarantine" button? I am asking that, because I see there also the Electrum wallet setup exe

As I said, that's the first time when I got that kind of problem. I often receive btc payments, but not as a direct payment (like this one with the problem), but through my websites and don't have any problems. That make me think, that it's a Clipboard malware.

Is there a free version of Malwarebytes?

Which one to use to remove the virus : Reimage, SpyHunter 5, or Malwarebytes?
What do you recommend?

Thanks for the reply, nc50lc!

Yes, 1P24xfd96qvMzLN81qxNhgPn2pm8Efa5AG is the address, which I copy-paste.
Yes, as I can see when I checked the address, the btc is spend 2 sec after it's received.

1. What can I do about that clipboard hijacking? I mean, should I check my computer for some virus? If yes, how to do that?
Does it mean, that all my btc addresses in my btc wallet can get the same problem? Or it happened only when I copy-paste the address?

Yes, I think that the sender isn't the culprit.

What do you mean with "clipboard hijacking"? I am sorry for asking, but I don't know what is that.

About your question - I compared the address in the email (I provided the receiving address by email yesterday) and the address in the blockchain link, and they are the same.

Here is the blockchain link : https://www.blockchain.com/btc/tx/0ddca07771e20587b00a1685702f1be13c2748832fa8c835040cdc2c3001ab33

Btw. I just checked the address on Google and check what I see about the address :  https://bitref.com/1P24xfd96qvMzLN81qxNhgPn2pm8Efa5AG    What does it mean? How the money came there and 2 min later are gone?

Sorry if I am asking a stupid questions!

Thanks for the reply, nc50lc!

- I did copy-paste a few of the addresses from the list, by your advice, and everything looks fine. I got the same addresses in the txt

- I did check the directory and see only one wallet.

As I said, I didn't have that kind of problem before. The guy, who sent me the btc, did that before and I was doing exact the same action like yesterday - open my wallet, go to "Receive" and copy the address there.
Today, when I saw, that I don't have the transaction in my balance, I checked all addresses in my list very, very careful and didn't find that address at all there. That's very weird...
Is it possible the receiving address to expire? If it's possible a certain btc receiving address to expire at all?

Hello,

yesterday I had to give my electrum bitcoin wallet receiving address to a guy to send me a certain amount in btc.
I copy-paste the receiving address from my btc wallet.
Today that guy sent me the blockchain link, where I see, that he sent the payment and that transaction is confirmed.
But I don't have it my wallet balance and the problem is, that I don't see the receiving address in my addresses list.
What could be the reason for that?
Yesterday I just copy-paste the address from the wallet, today that address isn't there and of course, the transaction isn't in my balance there also.
Please, help me with some advice what could be the reason for that and what should I do about it?
I did that before - copy-paste a receiving address - but didn't have that kind of problem before.
Thank you in advance!

I am selling clone script of Freebitco.in
The script isn't finished yet, but soon will be.
I see, that few months ago other member here was selling Freebitco.in clone. But the most interesting thing with that member was, that he asking for a price, which does not correspond to the value and complexity of the site. This is one of the most complex sites to be cloned, because there is Java script and PHP  working together. Also didn't provide any demo. Ask yourself why.

I am not able to say now an exact price. The site will be sold with the domain to some kind of auction. To the person with highest price (but, please, don't offer me $1000-$2000. Let's respect my and my colleagues work) .

I would provide demo to everyone, who need it.  Just contact me at email  p.geov68@mail.com or via skype : seoalexarankboostup service
This is the first time, when I am selling this script. We have many other clone scripts and if someone need different clone script, can contact me also.
Thank you for your time!

Thank you very much, friends,
I uninstalled everything from the computer (the one with not working wallet), do the installation again, restore it from the seeds and now everything is working and the last transaction is in my balance. Now have one working wallet on two computers.
Thank you very much to all, who helped me! Hope I also will be able to help to someone here!
You are all great, nice and intelligent people here!
A huge THANK YOU!