I was infected with a file called safecrypt8.exe that switched a QR code and embarrassingly costing me money. I only found one video that talks about it but its a long video that talks about some other viruses too. I do not know right now how I got it but I suspect maybe the file names of this same virus can be different than the one I got.
I was buying a watch from someone online and they sent me their BTC address and a qr image. I used the qr image just to find out that the money went somewhere else. I opened the file again and realized that something is changing the qr code. My virus scanner did not detect the file, but I manually started closing all kinds of processes and reopening the image and only after I ended the task safecrypt8.exe did the image open and not change.
The video below if you skip to 8:30 shows it.
https://www.youtube.com/watch?v=7BnFe913itE
