Trojan hijack my clipboard and change my bitcoin address

[timpire]

Hi All,

Just want to share my experience here.
Recently i just found out, as long as i copy my bitcoin address and paste it to other page, it changes to different unknown bitcoin address that doesn't belongs to mine. Luckily i notice the address is different from mine, no loss is caused. Finally i fix it with anti-malware, now my pc is back to health again.

http://picpaste.com/pics/btc_attack-8XWLtn9r.1472792199.jpg

[trashman43]

glad you noticed. but if you're getting trojans like this, you need to fundamentally change the way you use your PC. if you store bitcoins on a PC, you need to be very careful about what sites you visit and especially what files you download.

[BeginnerCoin]

Good catch! Unfortunately these types of malware trojans are all too common. I think everyone has been affected by something like this at one point or another, whether you want to admit it or not.

And if you haven't been affected, then you simply haven't been adventurous enough. :-)

Be careful and scan your computer regularly, and notice things like this, and you'll be fine. As long as you're not holding a large amount of value you're fine.

[jhenfelipe]

Hi All,

Just want to share my experience here.
Recently i just found out, as long as i copy my bitcoin address and paste it to other page, it changes to different unknown bitcoin address that doesn't belongs to mine. Luckily i notice the address is different from mine, no loss is caused. Finally i fix it with anti-malware, now my pc is back to health again.

It's nice to know that the attackers didn't get any of your coins. Bitcoin users must be aware of the existence of this malware, for them to be extra careful. That's why I'm always checking the address that I'm pasting, if it really matches on the wallet address that I copied. Well, luckily I haven't been attacked by this malware and hopefully not in the future.

Trojan.Coinbitclip? Read more here: https://www.symantec.com/security_response/writeup.jsp?docid=2016-020216-4204-99

[MyBTT]

You're really lucky you noticed. Remember to always be vigilant against viruses. You never know when you can get one. I got One before but luckily I caught it.

[bedeskon]

my friend got that virus i don't know what he did before but he think after he download some altcoin wallet, untill now even got it or not i always double check recipient address before i send bitcoins

[Senor.Bla]

it is true that double checking and a safe environment (and backups do not hurt) are important. not everyone does that and they only start when they lose money. the sad part is that for every person who manage to notice this there are probably two who do not and lose some coins.   

[shinratensei_]

Okay, nice aware and that will sue me for checking for twice about my address clipboard, another from that I ever finding my friend is finding in their PC but I don't know the trojan works. But I never get this malware in my PC I think very recommended for putting anti-malware in every PC in this time.

[rphk]

Hi All,

Just want to share my experience here.
Recently i just found out, as long as i copy my bitcoin address and paste it to other page, it changes to different unknown bitcoin address that doesn't belongs to mine. Luckily i notice the address is different from mine, no loss is caused. Finally i fix it with anti-malware, now my pc is back to health again.

good that you noticed early ,  now days there are lot of malware's , trozan and people are trying to hack which will try to gather details.It is better always keep the PC's secured with security feature like antivirus etc , and using strong passwords .

[davis196]

Hi All,

Just want to share my experience here.
Recently i just found out, as long as i copy my bitcoin address and paste it to other page, it changes to different unknown bitcoin address that doesn't belongs to mine. Luckily i notice the address is different from mine, no loss is caused. Finally i fix it with anti-malware, now my pc is back to health again.

Wow.This is a pretty nasty malware.

Usually i use Malwarebytes to clean my PC every week.

I`m not sure if this is enough for such malware.

I`m very carefull when i use bitcoin addresses so it`s impossible  to scam me.

[NorrisK]

You're really lucky you noticed. Remember to always be vigilant against viruses. You never know when you can get one. I got One before but luckily I caught it.

It is not luck that you notice something like this.. You should always and I mean always double check to see if the address is still the same.

I recommend using a hardware wallet like a trezor in this case, keeps you safe from bitcoin and also forces you to double check the address on the trezor itself. So even if hardware changes the address, you will always see the receiving address on the device itself and can confirm if it is where you want to send your coins to or not.

[Mike8]

OP, did you have any antivirus software installed? What was that?
If you didn't have, you should consider install one, even one of the free products.
If you did have, please share more details, since maybe there's a product or configuration others also have and it is inefficient.

Thanks for sharing this experience.

[asriloni]

OP, did you have any antivirus software installed? What was that?
If you didn't have, you should consider install one, even one of the free products.
If you did have, please share more details, since maybe there's a product or configuration others also have and it is inefficient.

Thanks for sharing this experience.

you are right,anti virus is really needed nowadays,if it's about money,i really encourage to pay for premium anti virus for the security and safety
it's better paying off the antivirus company for a little money rather than getting hacked than suddenly become poor,it's digital world that criminality is everywhere

[timpire]

OP, did you have any antivirus software installed? What was that?
If you didn't have, you should consider install one, even one of the free products.
If you did have, please share more details, since maybe there's a product or configuration others also have and it is inefficient.

Thanks for sharing this experience.

I do have antivirus which is Kaspersky Internet Security but it was disable because it blocks one of the bitcoin faucet that i always access to.

[unamis76]

Now the question is, what did you do or download in order to have this trojan installed? Would be helpful to sort out sources of these things.

[pereira4]

You need to backup your wallet and format your hard disk immediately. Also change password for every single login and including password for deciphering the bitcoin wallet itself. Your computer is compromised now and there is no 100% safe way to get it clean other than formating, must delete everything quick, we don't know if you may have a keylogger too.

[HeroCat]

Good antivirus is not easy to find, nowadays almost any antivirus company claim, that its antivirus is the best. But I think using Kaspersky is the best option, and especially if you use also Anti Malware soft. Of course there are more good solutions, but most often expensive ones, not for everyday user. The main advice - never switch off Kaspersky, it can cause a lot of problems then.  

[Mike8]

Having more than one antivirus software in the same time can make them all work bad. At least some say so.
Switching off antivirus is bad. If you want to keep for whatever reason an unsafe environment, use a virtual machine.

[Zadicar]

Hi All,

Just want to share my experience here.
Recently i just found out, as long as i copy my bitcoin address and paste it to other page, it changes to different unknown bitcoin address that doesn't belongs to mine. Luckily i notice the address is different from mine, no loss is caused. Finally i fix it with anti-malware, now my pc is back to health again.

I experienced  the same scenario when im trying to transafer funds to another  address luckily ive noticed it right away because i have a  habit  on double check or even triple  the address before i send thats why it saves me from that. There are really malwares that cant be detected by AV.

[pooya87]

OP, did you have any antivirus software installed? What was that?
If you didn't have, you should consider install one, even one of the free products.
If you did have, please share more details, since maybe there's a product or configuration others also have and it is inefficient.

Thanks for sharing this experience.

I do have antivirus which is Kaspersky Internet Security but it was disable because it blocks one of the bitcoin faucet that i always access to.

never disable your antivirus especially on a faucet site.
if you really want to access a site that is blocked, just learn how to add it to the exclusion list of your antivirus. and every one of them have something like that although you should make sure the URL is safe and then add it.
this may help you: https://support.kaspersky.com/5418