+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Keyloggers (https://hackforums.net/forumdisplay.php?fid=113)
+---- Thread: How to remove clipboard changer? (/showthread.php?tid=5918198)
How to remove clipboard changer? - Rs6 - Dec 12, 2018
I have been infected with btc clipboard changer.
Malwarebytes(premium) not found anything :(
Norton power eraser too :(
On process explorer again not found it....
Please give me advice how to find and delete this shit.
RE: How to remove clipboard changer? - Mr Relic - Dec 14, 2018
Go to your downloads folder on your PC and check the file location of any program you downloaded.
Anything that seems fishy just delete it.
BTC stealers are usually not very persistent unless they're a part of a RAT.
Also go into your regedit and check the startup folders for anything weird.
RE: How to remove clipboard changer? - The.Businessman - Dec 14, 2018
Check if you are connected to a rdp or something. I had a clipboard changer that operated out of a RDP once. Also, Use clipmon to check who changed it.