I need solution to this malware problem.

[Hyphen(-)]

Good day to everyone. I'm not sure if this is the appropriate place to drop this!

I'm having a problem with my PC when trying to copy my wallet address; recently, I noticed that if I copy the wallet address, the one I paste is different from the one I copied, and when I try to use the forum search to see if it's been used before in this forum, I couldn't find the wallet. What exactly is the issue?


I seek support with this matter. Thank you in advance.

[Charles-Tim]

Your computer has been infected with clipboard malware. You will need to reinstall your computer OS. Your computer will become like new with the reinstalled OS.

Assuming you have not noticed that, you would have sent the coin to the attacker's address. Be careful of malware. Make use of ad blocker like ublock origin. Only visit legit site.

[CryptoHFs]

Your computer has been infected with clipboard malware. You will need to reinstall your computer OS. Your computer will become like new with the reinstalled OS.

Assuming you have not noticed that, you would have sent the coin to the attacker's address. Be careful of malware. Make use of ad blocker like ublock origin. Only visit legit site.

would it be a better idea to giveup the whole HDD and get new one?

[Rruchi man]

Your computer has been infected with clipboard malware. You will need to reinstall your computer OS. Your computer will become like new with the reinstalled OS.

After reinstalling your computer OS, install a very good antivirus to prevent malware attacks if you never used one, or a better one if you had an antivirus on your computer before, but the malware attack was still successful. Also ensure that you are always sure to update the security patch to prevent you from being a victim to any new security vulnerability.

Be careful of malware. Make use of ad blocker like ublock origin. Only visit legit site.

In addition, be careful the links you click when surfing, If possible, use browsers that have paste protection.

Paste Protection can work automatically, monitoring the clipboard for sensitive data and locking it once it is added. A pop-up appears at the right-hand corner to warn users that their content has been secured. The browser will display a new warning if an external application manages to change the clipboard content. This feature will be useful against both hijacking and snooping attacks.

Opera browser supports the feature.

What Is Paste Protection?

[hosseinimr93]

would it be a better idea to giveup the whole HDD and get new one?

If your device is infected with a clipboard malware, you should format your hard drive and reinstall your operating system from scratch. That's enough to make sure you no longer have any malware in your computer and there is no need to get a new hard drive.

[CryptoHFs]

would it be a better idea to giveup the whole HDD and get new one?

If your device is infected with a clipboard malware, you should format your hard drive and reinstall your operating system from scratch. That's enough to make sure you no longer have any malware in your computer and there is no need to get a new hard drive.

it may be affected with other stuff that he won't figure now.. i would spend on new HDD than living worried cause of a format only

[Hyphen(-)]

Your computer has been infected with clipboard malware. You will need to reinstall your computer OS. Your computer will become like new with the reinstalled OS.

Assuming you have not noticed that, you would have sent the coin to the attacker's address. Be careful of malware. Make use of ad blocker like ublock origin. Only visit legit site.

I just notice it recently when I copied my own address to paste it for a Bitcoin transaction, then I notice the address I pasted was not the one I copied, I was worried and start thinking of what could this problem be.

I hope only reinstalling OS will help and no need to get a new hard disk for the system?

After reinstalling your computer OS, install a very good antivirus to prevent malware attacks if you never used one, or a better one if you had an antivirus on your computer before, but the malware attack was still successful.

Can you please recommend an Antivirus reputable for this, I am sure there are fake antivirus out there that will worsen this case of malware.

[o_e_l_e_o]

I hope only reinstalling OS will help and no need to get a new hard disk for the system?

Reinstalling the OS is insufficient, as doing so does not necessarily scrub all the other data on the disk. You need to completely reformat the drive (and then ideally overwrite it all with random data) in order to delete everything that is on it first, and then install a fresh OS.

Can you please recommend an Antivirus reputable for this, I am sure there are fake antivirus out there that will worsen this case of malware.

A good Linux distro will protect you from viruses better than any antivirus software on Windows.

You should also assume that any and all wallets you have on your computer are compromised. Once you can safely set up new wallets with new seed phrases, move all your coins in to these new wallets.

[LoyceV]

I just notice it recently when I copied my own address to paste it for a Bitcoin transaction, then I notice the address I pasted was not the one I copied, I was worried and start thinking of what could this problem be.

You're lucky you noticed it! Clipboard malware has been around for a while, I created a topic about it years ago: How to lose your Bitcoins with CTRL-C CTRL-V.

i would spend on new HDD than living worried cause of a format only

That makes no sense. The HDD only stores what your OS tells it to store. A proper format is enough, but if you're paranoid, do a random-fill followed by a zero-fill.
The real risk is in restoring your data: I assume OP wants to keep some data, and those shouldn't be executables.

[lovesmayfamilis]

Do not be afraid, reinstalling the system can solve the problem with the destruction of the virus in the clipboard. If you google it, it turns out that the OP caught a virus like Trojan. Coinbitclip. On the Internet, they write that you can catch such a virus from different cracks or add-ons for games. So the OP first needs to decide for himself whether he will use the computer for general purposes, including games and surfing the Internet, or whether he will separate all financial affairs from entertainment.
OP, if you know how to partition drives, install Windows on a separate drive for work, and install the second for public use, of course, protect the first with a password. But this will not be a good solution either, try to take an interest in Linux systems for work. If you are not ready for Linux, then be sure to install the latest licensed versions of Windows, and be sure to update them.
As for the antivirus, many will not be able to detect such a virus, since it only wakes up when something similar to a Bitcoin address appears in the clipboard. But by purchasing an antivirus with a license, and not visiting suspicious sites, you can protect yourself.
Other than that, read the topic, which describes all the problems with CTRL-C and CTRL-V very well.

https://bitcointalk.org/index.php?topic=5190776.0

[BitMaxz]

Can you please recommend an Antivirus reputable for this, I am sure there are fake antivirus out there that will worsen this case of malware.

I'm using Kaspersky never had any problems or issues using it for many years you just need to make sure before you format and reinstall the OS make sure you already have a backup of your wallet if not make a backup first before you format.

And about the OS make sure to download it from Microsoft if you are going to use Windows OS and avoid downloading cracked/modded Windows OS from an unknown source it might have hidden virus/malware.

[Rruchi man]

Can you please recommend an Antivirus reputable for this, I am sure there are fake antivirus out there that will worsen this case of malware.

Some examples of good antivirus that are effective against malwares are;
- Totalav
- Norton
- McAfee
(there are others, but I am most familiar with these)

Get the original installation, or download only from their website.

[Hyphen(-)]

You should also assume that any and all wallets you have on your computer are compromised. Once you can safely set up new wallets with new seed phrases, move all your coins in to these new wallets.

That's what I was thinking too, I have to get a new wallet to send all my Bitcoin back there which means I have to thoroughly check and recheck the wallet address before sending the Bitcoin.
For now, I will use my phone to create another Electron wallet pending till I solve this malware problem in my PC.

OP, if you know how to partition drives, install Windows on a separate drive for work, and install the second for public use, of course, protect the first with a password. But this will not be a good solution either, try to take an interest in Linux systems for work. If you are not ready for Linux, then be sure to install the latest licensed versions of Windows, and be sure to update them.
As for the antivirus, many will not be able to detect such a virus, since it only wakes up when something similar to a Bitcoin address appears in the clipboard. But by purchasing an antivirus with a license, and not visiting suspicious sites, you can protect yourself.
Other than that, read the topic, which describes all the problems with CTRL-C and CTRL-V very well.

https://bitcointalk.org/index.php?topic=5190776.0

I don't actually know more about Linux OS, but based on the recommendations, I will do more research about Linux OS and then install it so as to have perfect solution.

[LoyceV]

I don't actually know more about Linux OS, but based on the recommendations, I will do more research about Linux OS and then install it so as to have perfect solution.

Note that Linux is no magical solution, and more than with Windows you should understand what you're doing before doing it. But after a steep learning curve, you're probably going to like it.
Also note that there are many different desktops. Try a few, and see what works for you.

[lovesmayfamilis]

OP, what country are you from? No need to answer publicly, yesterday I accidentally came across an article in Russian, that coincidentally concerns your story, which happened to you.
Do you use the TOR browser? The reason for my question is that this browser is very popular on the forum, and installers of this browser have appeared on the network, which is infected with a Trojan clipper.
These installers are aimed at users in certain countries.

Unfortunately, I could not find a recent article in English, but you can use the translator to read the article.
https://securelist.ru/copy-paste-heist-clipboard-injector-targeting-cryptowallets/107180/

[Ultegra134]

Which browser are you using? Does this also apply if you're trying a different one? I'm certainly not the most qualified to provide you with a correct answer, but if I suffered something similar a few months ago, it might be completely different, but it wouldn't hurt checking yourself. I had a fake Google Sheets extension installed without my permission that was switching coin addresses on exchanges, etc. with a different one, leading to a scammer's wallet. Unfortunately, I didn't notice it in time; thankfully, it was a petty amount and didn't bother me.

On top of that, I couldn't even find a single mention on Google results. You can find my thread through my profile history if you're interested.

[taufik123]

No malware can survive drive/partition format. If you're that worried, you can delete all existing partitions then create new ones.

The last way that definitely solves the Clipboard Malware problem.
But keep in mind, important data must be backed up first and make sure the data is free from malware.
formatting the partition will delete all data.

If you decide to try Linux-based OS, make sure you choose user-friendly ones such as Linux Mint, Pop OS or Ubuntu. I mention this because i've seen few people start with less-friendly ones (such as Kali or Arch).

Ubuntu seems to be more familiar and has more users. I tried several Linux Distros starting from Kali Linux which is specifically for testers, Arch, Debian, Fedora, and Puppy Linux and the last one was Ubuntu. there are indeed many choices that can be adjusted to user needs.

It is quite difficult as a beginner, but if you are familiar with the terminal and its commands then using Linux will be a good suggestion.


In addition, for other options without having to reinstall or delete partitions, you can try to remove Cipboard Malware in several ways described in the article below. It's quite complicated, but if you want to try this option, you can follow the tutorial.
https://www.pcrisk.com/removal-guides/15815-clipboard-hijacker-malware

Virus names detected by some antiviruses:
AegisLab (Trojan.Win32.Generic.4!c),
Endgame (Malicious (high Confidence)),
ESET-NOD32 (PowerShell/Rozena.EA),
Kaspersky (UDS: DangerousObject.Multi.Generic),

Full List: Virus Total
https://www.virustotal.com/gui/file/f47cee6e222b3a8c0b2e0af1de610ac0ba32f248cb0234ccfaf2d7a1d51d9fd2/detection

[Lucius]

~snip~
Can you please recommend an Antivirus reputable for this, I am sure there are fake antivirus out there that will worsen this case of malware.

I won't say that good AV is something that won't help, but you should ask yourself how you infected your computer with that malware in the first place? If you use pirated (cracked) software, download torrents or visit websites through which malicious programs are most often distributed, then nothing will help you protect yourself. The best thing you can do is to separate all of the above from everything related to cryptocurrencies.

Anyone who owns cryptocurrencies becomes a target, and if you want to avoid getting hit, you have to stay one step ahead of the bad guys.

[taufik123]

-snip- If you use pirated (cracked) software, download torrents or visit websites through which malicious programs are most often distributed, then nothing will help you protect yourself. The best thing you can do is to separate all of the above from everything related to cryptocurrencies.

Anyone who owns cryptocurrencies becomes a target, and if you want to avoid getting hit, you have to stay one step ahead of the bad guys.

Web visits with lots of ads are probably the most common malware distribution. Some websites embed hidden ads and display pop-ups that will usually download files automatically.

It happened to my computer once. Trying to download some files from an application downloader website, but many ads appeared so some files were downloaded but they were files in disguise.
Opening a foreign file with a capacity that does not match the original file will be very dangerous.

The use of an antivirus or special defender embedded in Windows will be the first security to detect it.
Usually, you will get a warning if the file is indeed dangerous.

Staying one step ahead of the bad guys or scammers is necessary. Being more vigilant and separating everything related to crypto is better.
Use specialized devices that are used for crypto, don't lump all activities together.