WebMoney - warning and question

Question

Malware

Recently I caught a virus - when I copy the webmoney wallet number, it is replaced in the clipboard with another one (it does not depend on which R, Z, U, etc.). When you don't use a particular wallet often, it's easy to miss that the wallet has changed.

Question: the antivirus does not respond, I do not see anything foreign in the task manager. Has anyone come across this. If yes, what to do? Reinstall Windows? :)

Answer 1

Reinstall Windows? :)

Yeah, on Linux :)
But seriously, you need to do the following:
1. Full antivirus scan for viruses.
2. The process is either hidden or injected into another process. You can figure this out by killing the processes, and looking at the number's copy-paste response.
3. If there was no archive of crc-sums of files (which some antiviruses do), then it is impossible to determine whether they have been changed. If there is such data, then check it.
4. Put clipboard tweak like ClipMate, look at the result.
5. Strange as it may seem, Norton WinDoctor helped me in similar cases (but it was a long time ago).
Well, it's so offhand. Take down Windu - I think it will definitely help.
Well, you can really put a tench ;-) Good luck!

Answer 2

and be sure to regenerate the keys.

Answer 3

Maybe you have PuntoSwitcher?

Answer 4

I'll correct zizop:
Antivirus scanning - yes, but only offline scanning, for example support.kaspersky.ru/viruses/rescuedisk?level=2
After offline and online scanning z-oleg.com/secur/avz/