christheking Posted May 31, 2021 ID:1460601 Share Posted May 31, 2021 Hello, for few days now every time I try to copy my BTC or any other cryptocurrency wallet address the address changes when I paste it so I googled it and I found it was called clipboard hijacking and tried all the methods as well as Malwarebytes software and it couldn't help to fix the issue.. Please help!!! Link to post Share on other sites More sharing options...
Maurice Naggar Posted May 31, 2021 ID:1460652 Share Posted May 31, 2021 Hello @christheking As a first step, do what is listed on this one post of mine https://forums.malwarebytes.com/topic/267751-btc-clipper-malwarebytes-undetected/?do=findComment&comment=1426070 Link to post Share on other sites More sharing options...
christheking Posted May 31, 2021 Author ID:1460679 Share Posted May 31, 2021 2 hours ago, Maurice Naggar said: Hello @christheking As a first step, do what is listed on this one post of mine https://forums.malwarebytes.com/topic/267751-btc-clipper-malwarebytes-undetected/?do=findComment&comment=1426070 I tried it and it still didn't work I even tried to disable all the services for the RDP from the registry as you mentioned... Link to post Share on other sites More sharing options...
Maurice Naggar Posted May 31, 2021 ID:1460680 Share Posted May 31, 2021 I need for you to do the steps on this post https://forums.malwarebytes.com/topic/9573-im-infected-what-do-i-do-now/ Link to post Share on other sites More sharing options...
christheking Posted May 31, 2021 Author ID:1460682 Share Posted May 31, 2021 1 minute ago, Maurice Naggar said: I need for you to do the steps on this post https://forums.malwarebytes.com/topic/9573-im-infected-what-do-i-do-now/ I already did that earlier and here are the files Addition.txt FRST.txt Link to post Share on other sites More sharing options...
Maurice Naggar Posted May 31, 2021 ID:1460701 Share Posted May 31, 2021 Hello. This here is a custom script for this machine. The script Fixlist.txt needs to be saved to the same folder that contains FRST64.exe / you have yours saved somehere on \Desktop\Clipboard The custom script on this post is ONLY for this machine and NO other. Please be sure to Close any open work files, documents, any apps you started yourself before starting this. If there are any CD / DVD / or USB-flash-thumb or USB-storage drives attached, please disconnect any of those. The system will be rebooted after the script has run. Please save the (attached file named) FIXLIST.txt to the \Desktop\Clipboard folder Fixlist.txt Start the Windows Explorer and then, to the \Desktop\Clipboard folder. RIGHT click on FRST64.exe and select RUN as Administrator and allow it to proceed. Reply YES when prompted to allow to run the tool. If the tool warns you the version is outdated, please download and run the updated version. IF Windows prompts you about running this, select YES to allow it to proceed. IF you get a block message from Windows about this tool...... click line More info information on that screen and click button Run anyway on next screen. on the FRST window: Click the Fix button just once, and wait. PLEASE have lots of patience when this starts. You will see a green progress bar start. Lots of patience. This run here should be fairly quick. If you receive a message that a reboot is required, please make sure you allow it to restart normally. The tool will complete its run after restart. When finished, the tool will make a log ( Fixlog.txt) in the same location from where it was run. Please attach the FIXLOG.txt with your next reply later, at your next opportunity Do let me know how things are overall, after all this. Link to post Share on other sites More sharing options...
Maurice Naggar Posted June 4, 2021 ID:1461544 Share Posted June 4, 2021 Please be aware that this topic is only for christheking ( the original poster). Anyone else having issues should open their own ( separate topic ). This sub-forum offers assistance on a one to one basis. Link to post Share on other sites More sharing options...
Maurice Naggar Posted June 4, 2021 ID:1461545 Share Posted June 4, 2021 @christheking Good afternoon. I would like to check with you & see, How are you doing ? Link to post Share on other sites More sharing options...
Maurice Naggar Posted June 12, 2021 ID:1462947 Share Posted June 12, 2021 Hello @christheking I hope you are doing well. Re-checking in with you about this case. Are you needing further help ? Have you seen & done the Fix procedure at this link ? Please advise. Link to post Share on other sites More sharing options...
Maurice Naggar Posted June 22, 2021 ID:1464739 Share Posted June 22, 2021 Due to the lack of feedback, this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread. Tips to help protect from infection Thanks Link to post Share on other sites More sharing options...
Recommended Posts