If you have Cryptos, you must know about this Virus

So far, undetectable by the antivirus, this virus is extremely dangerous at the time you send information in order to receive coins, or you are about to send them.

It is natural to copy/paste wallet addresses in order to fill forms, this virus installs an intermediate process between your computer and your clipboard.

Unsplash

Once you copy an address, it detects the coin type and changes it by a new one. In this way, you end up sending money to an unknown wallet o asking another person to send you coins that you never receive.

How to find it?

The filename is ws.exe. It is executed at startup and identifies itself as a Windows component. I found it at

c:\Users\XXXX\AppData\Roaming\WS\ws.exe

So, when you copy a wallet address, be careful and check that what you paste is what you copy, you can end up losing all your bitcoins, BTC, ETH or USDT.

You can googlea “copy paste virus crypto” and you even will see videos about it and scary tales from users.

Until today, antivirus can’t detect it!!!

To clean it, delete it from autostart at task manager/startup, kill it from the list of running processes and then delete it from disk (c:\Users\XXXX\AppData\Roaming\WS\ws.exe).