Suspicious crypto miner detected by AVG after linking WG account to steam.

[A Fish in a Donut]

I had downloaded World of Tanks a little while ago but didn't use it through steam because I couldn't log into my account. That is until today. I linked my steam account to the old WG account I had and logged in through the steam client. Within seconds of logging in on the game launcher I got a notification from AVG that a Win32:CryptoMiner-K [Trj] was infecting cmd.exe[5544]. I want to add I just turned on my PC and had nothing else running besides the popup of my web browser that was launched by WG to link my account, Steam and of course the WG game launcher.

Origin was C:\Windows\System32\cmd.exe

[8_Hussars]

Take it seriously.

Windows Defender and most paid or free virus or malware software should quarantine and remove the threat automatically. MalwareBytes is good. AVG should have done so as well.

I highly doubt its Steam or WG. Its likely a previous downloaded file from an unreliable source, browser infection, or it could even be a phishing attack.

There are several reliable online guides to removing it.

P.S. Anti-virus software does throw up false positives, occasionally.

[_Pele333]

Hi. Well, the game enjoys great confidence among players and it has been tested for decades. I really doubt that anything like this could happen with such a game. And even more so, you are the only one who has written about it for all the time that I can remember myself. I recommend that you check your computer for dangerous and malicious programs and remove them. Don't mess with it, take care of your data.

[A Fish in a Donut]

I did some further digging on google and what not, I'm wondering if I got a false positive from AVG. I haven't seen anything about this anywhere else. AVG did automatically quarantine the file, I did a full scan with AVG. I also downloaded Microsoft's malicious file scanner and it also found nothing. My PC runs fine and I've had no issues with performance or unusual programs running in the background taking up a lot of CPU or GPU usage. I will keep monitoring, the timing was just incredibly odd for AVG to flag that file. I will say I've had false positives before with AVG, so it wouldn't be a surprise. I will report back here if I find anything else.

[KatherineFtw]

Get a better anti-virus. Avast has been known to be snake oil that gets a lot of false positives for a decade now. It's as "good" as Norton or McAfee, in that it's crap.

Windows Defender + Malwarebytes free or just Malwarebytes premium worked far better for me when I was still on Windows.