Can a hacker/malware copy my address except for 3 characters?

Hello,

Just want to confirm if i've been hacked or not. I wanted to take some ETH off Kraken and put it onto my ledger so I copied the address and pasted it into Kraken. The first and last 10 characters were the same so I hit go. When checking the ethereum explorer, I can see the transaction has gone through but I never received anything, I then checked the address I copied from my Ledger with the address Kraken used, and they're not the same, 3 characters in the middle of the address have been mixed up.

Is it possible to create an Ethereum address of your own choosing? The only way I can see how this would've been done is that my computer is compromised, and when I copied the address, the malicious software, hijacks my copy/paste, creates a new Ethereum address and steals it that way.

I literally only got the computer a month ago from Scan (formatted without an OS) and haven't done anything with crypto at all on it until today.

What should I be doing now? Formatting again? Thanks for any help :(