How to avoid getting scammed (Clipped)

[Bleecher]

What does getting clipped mean?

 

I didn't know it until it happened to me, and it sucks so hard. 

 

It means that your clipboard is modified to write someone's address when you copy a text of 34 chars starting with a 1 or a 3, with other changes that make it only change it in the situations when you are copying a BTC or any other address.

 

Example here: https://streamable.com/j15ow1

 

That makes that when you will copy an address to make or receive a payment, you will copy the attackers address, and you will send the money to him. The guy that clipped me stole almost 700$ in 3-4 days.

 

How to remove it: 

 

I was getting sick with it because I scanned everyhting with MalwareBytes and nothing changed, but @Bigboislave2 found me a solution

 

We press Win + R, on the Run we write regedit, and accept.

 

Once we are there, we have to switch from folders, the path we have to go is: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

 

Once we are on \Run, we need to find a suspicious register, mine was called FKMSERVICE64, (you can find it by scanning your computer with malwarebytes and checking the names of the threats).

 

We just delete it, restart computer and... No clipper anymore!

 

I got scammed and you could get scammed too if you don't check twice the address before sending!! Don't fall for this nulled bois   

[Sarah]

You can also press win + r, enter "shell:startup", hit enter and check if the folder contains anything you didn't set to autostart (usually random .exe files)

 

if it does you know you have a clipper

[Bleecher]

You can also press win + r, enter "shell:startup", hit enter and check if the folder contains anything you didn't set to autostart (usually random .exe files)

 

if it does you know you have a clipper

 

Lol you're right, I deleted one and it still happened but I was sus about a .exe and did what you said and found it there, thanks! 

[BrawnyMan]

I think that if you go on Task Manager under Startup, you can also see if there is anything that shouldn't be.

And i think this is a bit faster than doing the Win + R and so on

[ChaturbateSell]

can you pm me? i am interested!

[karderr69]

woah this is even a thing

[blackbirdy]

Cool sir. Thanks for sharing this useful information.