Beware of Clipboard Virus!

[DYING_S0UL]

And this is the third time I have gotten infected with the clipboard virus. I don't know why I always end up with the particular virus. Though I don't know how to properly define this thing as a virus or malware. I don't use any third-party antivirus, but my Windows Defender is always on. So I have no idea how I got infected. Windows defender seems to not be working regarding this virus. I guess, other antivirus programs won't work either. There is no way to fix this. So unfortunately, I had to reinstall Windows twice the same day to fully get rid of this virus. Such a hassle. Lucky for me, I didn't send out any funds since I remembered my original address. The moment I saw a change of address, I knew something was wrong. Here is the phishing address. The total received amount is almost $28k I wonder how many innocent people fell a victim to it.

[1714289773]

1714289773

[1714289773]

1714289773

[1714289773]

1714289773

[1714289773]

1714289773

[nakamura12]

As discussed before, it is always better to triple check when you are going to send any crypto if there's any changes to the address or not. If I say something then I would say that it is better to be safe than sorry. Well, it doesn't feel good when you lost something that you have work hard to get it or earn it and just vanish just like that. It's good that you share this to remind others who have already know this and to let others know about it that doesn't know about this yet. My opinion about how you get this is I think you may have downloaded a software that isn't downloaded from the original website and may be infected with that malware.

[Zaguru12]

The reinstallation of the OS is not enough, you need to total the format the entire hard drive this will delete everything and then you install a new OS this time around use Linux distro as it is better than the windows OS or antivirus on it.

Then the exiting wallet on that device should be assumed to been already compromised you will need to create a new wallet and send your coins to the new one.

Check this link by LoyceV on which explains problems associated with CTRL-C and CTRL-V

[DYING_S0UL]

My opinion about how you get this is I think you may have downloaded a software that isn't downloaded from the original website and may be infected with that malware.

That could be the answer since, I recently got this device. So a lot of software had to be reinstalled. But that's not what I'm worrying about. I worry about windows defender not detecting it. And it's not that I got infected and the very moment I noticed it. I think I was infected for more then 10 days. There was no way of knowing, until I tried to make a transaction and made this discovery. That's what I don't like about it. This sly virus, not showing up anywhere until someone tried something related to crypto.

[lovesmayfamilis]

You are in vain hoping for Windows Defender, or rather, you are in vain hoping for Windows. To keep Windows crystal clean, you need to disconnect it from the network. If you start wondering how many holes users regularly open due to using this system, you will be very disappointed. Start learning Linux systems, and divide your Internet surfing into entertainment, Photoshop hobbies, and finances.
As for the addresses to which they wanted to redirect you, I see a slightly different amount in this wallet. But yes, there are complaints that the clipper was redirected to this address.

https://checkbitcoinaddress.com/bitcoin/36VMz3kzFSnFHkfgTXr7Wdx9bx5HCF8tSs

[jerry0]

What if you use norton or kaspersky total?

[|MINER|]

What if you use norton or kaspersky total?

Third party antiviruses help identify malwares, but sometimes people fall into such traps through irresponsible browsing and downloading files, those traps or malwares can bypass the protection system of this type of antivirus. Therefore, I think that to avoid phishing attack, the user cannot be made to do your responsible browsing, especially on the device that does his official work. However, I would also not disencourage the use of third party antivirus.

[cryptoaddictchie]

Thats why everyone must be reminded about copying and paste. We dont know if we are infected with such virus and a little bit of changes from the address means it got compromised. You dont click the send button right away and must have triple check or more first the address if its correct. I think it got happened to my friend on ronin wallet add. He didnt received the tokens inspite checking it was correct, however he noticed that theres a different letter and figure on last four lines. So it is a virus indeed.

[LoyceV]

install a new OS this time around use Linux distro

That would be better, but:

How to prevent this
1. Don't use Windows, but we both know you're not going to change that.

I recently got this device. So a lot of software had to be reinstalled.

Where did you get this software? Official sources and official paid licenses, or some warez site or "friends"?
That's another reason to use Linux: no need to install hacked software.

I worry about windows defender not detecting it.

Microsoft has been selling unsecure software for decades. Why would you expect anything else now?

And this is the third time I have gotten infected with the clipboard virus.

You know what they say: "Insanity is doing the same thing over and over again and expecting different results." (the source of this quote seems to be unknown). If you did the same thing again, you'll get the same malware for the fourth time.

I don't know why I always end up with the particular virus. Though I don't know how to properly define this thing as a virus or malware. I don't use any third-party antivirus, but my Windows Defender is always on. So I have no idea how I got infected. Windows defender seems to not be working regarding this virus.

My guess: the malware is included in some of the software you install. Or you just download it again after a few days. Either way, stop doing that. If you have confirmed malware on your system, you can't be sure it hasn't collected more data. So change all your passwords and if you use a hot wallet, create a new seed phrase on a clean system and move your funds.

[tranthidung]

That could be the answer since, I recently got this device. So a lot of software had to be reinstalled. But that's not what I'm worrying about. I worry about windows defender not detecting it.

Prevention is better than cure and you must know all AntiVirus Softwares can not protect your from all online threats. If you completely rely on those AVs, and think you will be safely with their shields, you are wrong and your risk will become bigger.

And it's not that I got infected and the very moment I noticed it. I think I was infected for more then 10 days. There was no way of knowing, until I tried to make a transaction and made this discovery. That's what I don't like about it. This sly virus, not showing up anywhere until someone tried something related to crypto.

I see another wrong practice here. Immediately after you got a new device, you installed, imported your wallet on it. I can not know why you do it and what is status of your previous device. Assume you have your wallet on both previous and new devices, you are too hurry to take risk with your new device that I believe not is completely new when you got it.

You can use Linux and TailOS

• https://tails.net/install/linux/index.en.html
• How to Install Tails OS on USB flash drive for Wallet Purpose

[DYING_S0UL]

install a new OS this time around use Linux distro

I did installed Linux Mint METE. But didn't found it comfortable at first. So I had revert back to Windows. Especially the UI, how it looked, appeared. The interface, font looked like breaking, not smooth, pixels.

How to prevent this
1. Don't use Windows, but we both know you're not going to change that.

Yes as you said. It is true for most of the new users. I was thinking about duel booting but unfortunately I don't have enough space to run both OS. Only 240GB SSD.

Where did you get this software? Official sources and official paid licenses, or some warez site or "friends"?
That's another reason to use Linux: no need to install hacked software.

Yes, most probably I got infected using a crack version Driver updater. Since I had to fresh install everything.

Microsoft has been selling unsecure software for decades. Why would you expect anything else now?

It's not that bad either. Most of the time it would detect malwares. Maybe not best at defending but at least it gave a notification some malicious software is in your system somewhere. So hurry up and remove it since I (defender) can't.

You know what they say: "Insanity is doing the same thing over and over again and expecting different results." (the source of this quote seems to be unknown). If you did the same thing again, you'll get the same malware for the fourth time.

I have a bad habit of changing distros. Not just Windows or Linux, also Android. Since I am a custom ROM user. I frequently change my OS, to test out new features and bugs etc.

My guess: the malware is included in some of the software you install. Or you just download it again after a few days. Either way, stop doing that. If you have confirmed malware on your system, you can't be sure it hasn't collected more data. So change all your passwords and if you use a hot wallet, create a new seed phrase on a clean system and move your funds.

No worries, LoyceV. I had nothing of crypto on my system. No keys, no doc files, no nothing. Also all the funds have been moved already. Lesson learned.

You are in vain hoping for Windows Defender, or rather, you are in vain hoping for Windows. To keep Windows crystal clean, you need to disconnect it from the network. If you start wondering how many holes users regularly open due to using this system, you will be very disappointed. Start learning Linux systems, and divide your Internet surfing into entertainment, Photoshop hobbies, and finances.
As for the addresses to which they wanted to redirect you, I see a slightly different amount in this wallet. But yes, there are complaints that the clipper was redirected to this address.

I do game sometimes. But can't buy all the games as I don't have enough money. And you know better that Linux isn't gaming friendly. Although they have Steam but that doesn't support crack games. So I had no other choise.

Thats why everyone must be reminded about copying and paste. We dont know if we are infected with such virus and a little bit of changes from the address means it got compromised. You dont click the send button right away and must have triple check or more first the address if its correct. I think it got happened to my friend on ronin wallet add. He didnt received the tokens inspite checking it was correct, however he noticed that theres a different letter and figure on last four lines. So it is a virus indeed.

I first time I got infected, I had no idea of a clipboard virus. I thought my copy paste function was broken. So I tried everything to fix it. Like editing, cleaning registry editor, using different health software or updating system etc. But couldn't fix. As a last resort, I had to format the SSD and reinstall Windows.


(I made a lot of quotes to multiple users. Is it ok though to quote this much? Just a curious question  )

[lovesmayfamilis]

Yes, most probably I got infected using a crack version Driver updater. Since I had to fresh install everything.

Reinstalling Windows with a crack You don't have to continue any further. Any crack will contain something bad. Or do you think that all hacked Windows products are created by good people who save you money?
Besides, if hacked games are so important to you, you shouldn’t have created this topic at all and asked questions about what’s wrong with you. I think the answer is obvious to everyone.
I know many gamers who turn a blind eye to viruses because there is nothing they think is important on their devices. But if the computer has more power, the same viruses (RAT) can easily be turned into a server, which provides the ability to control it from the outside. And very often, hacked games contain it. And what will be done by another person from your IP will already depend on him, but you will be responsible.

(I made a lot of quotes to multiple users. Is it ok though to quote this much? Just a curious question  )

You did everything right.

[DYING_S0UL]

Reinstalling Windows with a crack You don't have to continue any further. Any crack will contain something bad. Or do you think that all hacked Windows products are created by good people who save you money?

I am well aware of the risks. Thank you for the suggestion. For this reason, I don't store anything related to crypto on my device. I noticed this virus when I was trying to use an exchange. I copied the deposit address and that's when it happened. There was no funds, seedphrase, secret keys or important documents laying around on my desktop.

I made this post, so that other people may see it. Especially the newbies. Since many of us don't know there is a virus called clipboard virus that hijacks clipboards. The topic was created purely as a reminder (again). 

I see another wrong practice here. Immediately after you got a new device, you installed, imported your wallet on it. I can not know why you do it and what is status of your previous device. Assume you have your wallet on both previous and new devices, you are too hurry to take risk with your new device that I believe not is completely new when you got it.

Check the above response I gave to lovesmayfamilis...,

You can use Linux and TailOS

I know about TailsOS. Thank you. Also used this before. But the problem is it's na one time OS. I don't know about security it gives but it was created as a privacy enhancement OS. Also, I don't know if USB sticks are capable enough to run this OS for a longer period of time. Not saying it's bad, it's just not reliable. I wouldn't just prefer this. Another thing, AFAIK, Windoes does have a similar feature as TailsOS. I can't just remember how to enable/use it at this moment. I guess, many of you didn't knew this (I guess again).

[Text]

It's frustrating and alarming to deal with such a virus, where you're not sure if you've completely eradicated it after taking the necessary steps to get rid of it. It's possible that the virus employed sophisticated methods to avoid detection, or it could be a new strain, which is why the Windows Defender antivirus program may not have caught up with it yet.

[Z390]

Even if you are so careful with running windows OS you can still make some mistakes that will affect your PC with malware or trojans, the best thing you can do is get a hardware wallet, the risk with PC is too high, even a smartphone with Electrum wallet is safer than running a crypto wallet on PC.

The idea of running a Linux OS is also better than windows OS if you know how to, but I am better off using a hardware wallet or a bitcoin wallet on my smartphone, there are many things I can handle pretty well but a windows OS isn't one of them.

Before I gave up on PC for storing crypto assets I always end up with a malware one way or the other, even with antivirus installed on the PC, the only thing that makes sense if you have no option that to use a windows OS is to never use the PC to surf the net or download anything online, just use the PC for crypto wallet only, nothing else.

[Husires]

I am well aware of the risks. Thank you for the suggestion. For this reason, I don't store anything related to crypto on my device. I noticed this virus when I was trying to use an exchange. I copied the deposit address and that's when it happened. There was no funds, seedphrase, secret keys or important documents laying around on my desktop.

If viruses are in your files, reinstalling the operating system will not activate them unless you click on them. Therefore, if you do not open any file and notice that these viruses are present, then the problem is in the operating system. Either it is from an unknown source, or the crack runs before the operating system and leads to viruses running then even antivirus won't be able to notice it.

You can burn Ubuntu to Flash USB and boot from it. Here you can easily download Electrum and use Firefox to access exchanges without fear that there are viruses, and return to using Windows for other tasks.

[Catenaccio]

Please report that address of scammers to this https://www.bitcoinwhoswho.com

I checked the address and there is not scam report, scam tag against the address so we can contribute to flag it.
https://www.bitcoinwhoswho.com/address/36VMz3kzFSnFHkfgTXr7Wdx9bx5HCF8tSs

These scammers started to use that address since April 2022
https://bitinfocharts.com/bitcoin/address/36VMz3kzFSnFHkfgTXr7Wdx9bx5HCF8tSs

From that address transaction history, I found that scammers did not use automatic tool to broadcast transactions immediately after received coins from victims. Usually, after receiving, it takes like 15 minutes or 1 hour for scammers to manually broadcast transactions with very high transaction fee rate.
https://www.blockchain.com/explorer/addresses/btc/36VMz3kzFSnFHkfgTXr7Wdx9bx5HCF8tSs

[tech30338]

The reinstallation of the OS is not enough, you need to total the format the entire hard drive this will delete everything and then you install a new OS this time around use Linux distro as it is better than the windows OS or antivirus on it.

Then the exiting wallet on that device should be assumed to been already compromised you will need to create a new wallet and send your coins to the new one.

Check this link by LoyceV on which explains problems associated with CTRL-C and CTRL-V

I agree that its better to use Linux distros like Ubuntu and other flavors, It is also better if you are using a Windows PC to invest in antivirus, what is a few dollars if you are holding a large amount of money, scan your backups, sometimes you are doing backup without knowing that the malware is hidden there, some people I encounter they have fresh reinstall of windows but the virus still there, when they found out the virus is on their backup.
Always update your antivirus, and operating system, and scan all drives.

[Lucius]

And this is the third time I have gotten infected with the clipboard virus. I don't know why I always end up with the particular virus.

I made my first transaction about 10 years ago and I never had any problems with any viruses/malware, and the whole philosophy is to stop using pirated software and visiting websites that are known for distributing viruses/malware. In addition, do not accidentally click on links from unknown senders that you receive in your e-mail or via social networks.

Though I don't know how to properly define this thing as a virus or malware. I don't use any third-party antivirus, but my Windows Defender is always on. So I have no idea how I got infected. Windows defender seems to not be working regarding this virus. I guess, other antivirus programs won't work either. There is no way to fix this.
~snip~

WD is something you get with Windows OS and should not be considered premium protection, so even though some will tell you that all AVs are equal (useless), that is simply not true. I don't want to advertise any such product, so I leave it to anyone who wants to know more and knows how to use search engines.

If you want to change something about the problem you are constantly running into, you have to change the way you use your computer and the internet, otherwise no antivirus or operating system will protect you.

[SamReomo]

If you are facing that problem on Windows operating system then your only possible and safe choice is to go with an open-source operating system that's managed by developers from all around the world and it's source is freely shared with the ones who use it.

I would say the easiest out of those open source operating systems is going to be a Linux based distro that would have a good user interface and themes which will help windows users to easily get used to it. Linux distro like Linix Mint is going to be my choice if someone wants to have a safe operating system that looks similar to Windows.

Another free and open-source operating system that I used in past which's very similar to Windows XP is ReactOS. I don't know if that one will work or not as I have used it when it was in its early versions but I can say that the programs worked fine on that operating system. You can give that one a try as well.

Windows operating system is used by most people and is managed by Microsoft team of developers only whom Microsoft can trust but the Linux and other open-source operating systems are managed by the community of developers who want to help others by providing them free software. You can safely trust the open-source operating systems and surely you won't face such clipboard virus or any other issues with those operating systems.