Leaderboard

First if this is mentioned elsewhere apologies. Also Aslain I know you're not responsible for what's in other folks mods that you include in your pack. And I'm not suggesting you are, just passing along some info. And thanks for all you do on your site. Link to TAP's article, https://thearmoredpatrol.com/2018/02/20/wot-potential-security-breach/ Just ran into this myself - at least it seems. Couldn't update WoT and got the couldn't connect to update service. Soon after my AV blocked a suspicious connection to a similar IP listed in the article. May have been the same IP I know the first handful of numbers were. But I didn't write it down nor have I checked my AV history. Deleted my appdata for WoT and was able to update the game. Did this based on some comments in the TAP article even though I didn't see anything in there that looked suspicious. Also before I deleted the appdata folder I was getting partial pages on WoT forum that appeared to be from packet loss. Also couldn't connect to a few other sites. ISP speeds were fine, but to clarify I only checked speeds not packet loss, etc.. After I deleted the appdata everything seems fine - at least for now.

Get new modpack #10, reverted his core script to old version from modpack #06.

The one from solo isn't related at all - that's on solo's website - where he asked to allow or opt out of using the miner - which would - if allowed - make him a tiny bit of money while you visit his website I suppose. (And doesn't look like he has that anymore on his site - I know others have tried using similar stuff too..) As for Aslain's modpack - he's been doing checks with network analyzer programs (Fiddler, for example), to see what happens when running the various mods.

Ever since downloading v08 I've been getting the same thing. I didn't have the issue with 06, and I never used 07. Went from 06-08 and it started happening with 08. Here's a few more links to other reports. If it does turn out to be one of the modders you include in your packs I hope they get named and shamed. What a shit thing to do. I use your pack b/c of the integrity you've always demonstrated - your pack is always clean and you go to great lengths to stay on top of what's legal and illegal. I will continue to use your modpack and would recommend it to anyone now and in the future. I'm posting this simply to help you if in fact it is originating from one of the modders you include. http://forum.worldoftanks.eu/index.php?/topic/663292-possible-security-gapbitcoin-mining/ http://forum.worldoftanks.com/index.php?/topic/564173-good-legal-modpack-now-that-solos-wants-to-bitcoin-mine-with-my-computer/ <-- actually from December '17 There's a few others - some in foreign languages I can't read. Hope this helps your search - assuming it's a mod and not WoT itself. And here's the specifics from Norton: Name of the IPS attack: Web Attack: JSCoinminer Download 6 Attacking PC: 82.118.20.2, 80 Attacker's URL: search.linkmyc.com/js/timeCounter.js?v=20171102 Attack caused by: DEVICE\HARDDISKVOLUME4\GAMES\WORLD_OF_TANKS\RES\CEF\CEF_BROWSER_PROCESS.EXE "

v9.22.0.1 #08 (21-02-2018): - added 3 position options to XVM's Show Team WN8 - added Premium tanks colored by gold with HDR (by Aslain) - added HDR icons on Tech-Tree (by Aslain) - added HDR icons on tank carousel (by Aslain) - updated PYmodsCore - updated white dead skins - updated Camo Selector [the mod is under heavy developement hence frequent updates] - updated Marks of Excellence Extended [removed extra options from modpack, available in-game mod menu now] - removed few mods by TPblHbl4_78 (replaced with my own version) - installation optimization

I saw this article. You must know that I check every mod before adding it to the modpack, and also checking it with network analyzer. If something will try to download a coin miner, I will probably know about it. Let me know if you find something suspicious and I will double-check it.