[R5N3T]

What are the common signs that indicate a personal computer might be infected with malware, viruses, or other cyber threats?

[Null State]

If your PC’s acting weird, slow, random pop-ups, strange apps, or weird browser redirects — that’s a red flag.

[R5N3T]

My computer had an issue. Every time I copied a Bitcoin address and pasted it, the address changed to a different one. Luckily, I always double-checked before sending. I’ve now reinstalled my computer. Friends, please be careful and always verify the Bitcoin address before sending.

[WinGV]

My computer had an issue. Every time I copied a Bitcoin address and pasted it, the address changed to a different one. Luckily, I always double-checked before sending. I’ve now reinstalled my computer. Friends, please be careful and always verify the Bitcoin address before sending.

You can check the list of process trying to identify if there's anything weird/unknown. But the process could be injected in another one if the attackers know their stuff. For persistence you should check your registry Run entries for anything unusual. Also WMI events, or scheduled tasks. But a rootkit could be even at deeper level (though I doubt it would be the case for a simple clipboard hijacker). The best thing to do when you know your computer has been compromised would be to go with a fresh install. Even though it might be a bit overkill for most of the malwares, you don't wanna take risks, especially if you deal with cryptos.

---

Forget my curiosity but, when your wallet address was replaced, how did you notice it ? Were all the characters different or were there first/last few similar ? Did you check the whole address or just the first/last few ?

[R5N3T]

I didn’t want to take any risks, so I went straight ahead and did a fresh reinstall.

[C00dZero]

If the clipboard isn't working properly, you probably have a keylogger or wallet spoofing.

[R5N3T]

If the clipboard isn't working properly, you probably have a keylogger or wallet spoofing.

I thought so too.

[habeotron]

You can check the list of process trying to identify if there's anything weird/unknown.

[DeathPenalty666]

for rat/botnet/loader and most remote control tool just looking for tcp/udp traffic help a lot. cmd netstat -n then arrow up and enter do this for a while and you see most connection, sync sent is dead rat looking for remote server, look for all ip to see what it link to.

Rat and most remote tool are very easy to detect, they all link to a ip. Advanced tool may use tor for data exfill or control and may be harder to detect. Soon as you have a suspcious ip you can get many detail and mess with them a lot xD. One dude tried to rat a flash crypto tool and i had 3 new ip in my list, he got his 3 vps under heavy ddos hahaha.

Alway check startup app, from task manager or even other folder for this. Make sure all ink used if there is are legit. And best one, NEXT TIME you format setup esxi as main os. If at anytime you have doubt you can load a snapshot from a previous time when it was safe, run many vm at same time, manage every connection and security and if you need a fresh machine you have one in 2min and can run up to 4 os at same time :)

[whitehatlord]

The computer running slowly, or having suspicious things happening on accounts is a very big sign.

[R5N3T]

The computer running slowly, or having suspicious things happening on accounts is a very big sign.

The problem has been solved, but thanks anyway