Beware of Clipboard Virus!

[Rimueng]

And this is the third time I have gotten infected with the clipboard virus. I don't know why I always end up with the particular virus. Though I don't know how to properly define this thing as a virus or malware. I don't use any third-party antivirus, but my Windows Defender is always on. So I have no idea how I got infected. Windows defender seems to not be working regarding this virus. I guess, other antivirus programs won't work either. There is no way to fix this. So unfortunately, I had to reinstall Windows twice the same day to fully get rid of this virus. Such a hassle. Lucky for me, I didn't send out any funds since I remembered my original address. The moment I saw a change of address, I knew something was wrong. Here is the phishing address. The total received amount is almost $28k I wonder how many innocent people fell a victim to it.

It seems that this is not the problematic windows defender, not all software is dangerous or viruses by windows defender. If I look at the case, it looks like this wallet is still connected to the scam site. because if the virus will disappear if you change the OS to linux.

[1714724322]

1714724322

[1714724322]

1714724322

[1714724322]

1714724322

[DYING_S0UL]

If a virus has been detected, reinstalling your device is the most appropriate choice to clean everything. As OP experienced, it's possible that the antivirus really didn't detect the virus until we realized when it was connected to a crypto wallet. and the situation is just waiting for us to be careless.

Nope, reformat is the best thing to do if there's a potential that you've downloaded a virus together with an app, that's the only way to remove the virus and be sure that reuse of the computer is clean slate. Virus don't go away just because you've deleted the file that it came with because some of them install themselves somewhere that's different from the destination of the file that they've been with.

By reinstalling he may have only meant installing windows freshly. But yes your are correct. Reformatting the hard disk the only best thing that can ensure you that the virus isn't there anymore. Because you can't detect it when using windows normally. BTW I wouldn't tell this virus is a virus. A virus replaces malicious codes into the original codes, basically making the system unstable or unusable. But in this case, it doesn't do anything or damage anything, it just replaces the address. What a genius piece of virus/malware man, really genius!!! . The person who made this could have made something good but instead he have chosen evil.

[terrific]

The best anti virus still is our self awareness. Sorry for your loss OP. This is the reason that even we've got self awareness with our browsing activities, it's always best to check receiver's address carefully before doing a transaction.

This why I always advice to use mobile for transaction and stay away from doing any single transaction in the PC where this scam attacks are in the high numbers.

It's opposite for me, it's still best to check transactions through a PC or laptop setup. Or, when you have spare devices, you can be meticulous and just use it specifically for transactions and you won't do any browsing there or any downloads aside from the wallets that you have there.

[Lucius]

@DYING_S0UL, I remembered one "trick" that might help you speed up your computer, because even though you have 8 GB of RAM and you say that it still works slowly, you can try to stop a W10 feature called (SysMain (Superfetch)) which actually preloads those apps that you use it most often, so it can take up a lot of RAM.

All you need is to follow the instructions on the link and first stop that process, and then disable it from starting automatically with the OS. In case you need this feature again, you can simply turn it on.

Superfetch was introduced with Windows Vista and it's now known as SysMain on the latest versions of Windows 10 and 11. This Windows service runs in the background and analyzes your PC usage.
Based on your usage, the service determines what apps you're most likely to use. Then, it preloads those apps in your PC's RAM so you can open those apps quickly. In other words, this service speeds up the launching of the most used apps on your PC.

Code:

https://www.howtogeek.com/811043/disable-superfetch/

[DYING_S0UL]

...(Superfetch)...

Thank you for the heads up. Though I have had computer knowledge for many years, I never knew something like this even existed. I mean wow. I'll give it a try and see how it works.