Trojan caught by Virus Protection when starting Hearthstone

[BIGeZe-1485]

Just received a warning from my virus protection when launching Hearthstone stating "Detected: Trojan:Script/Wacatac.H!ml located in file: C:\Program Files (x86)\Hearthstone\Hearthstone_Data\Plugins\x86\audioplugin_fluxer.dll. It was quarantined. Anyone else have this issue?

[Mountaineer-11770]

It’s listed in the known issues thread.

It’s a false-positive; they are working on it.

[Bobafett345-1506]

The official narrative is “nothing to see here” even though the first step in most troubleshooting is to turn off your antivirus.

Now we know why.

[Mountaineer-11770]

Here’s the word from the devs.

@Kaeyoh-11482

[Added 9/19] We’ve received reports of antivirus software flagging “audioplugin_fluxer.dll” as malware. This is a false positive that has been submitted to the antivirus vendors for clearance. The file can be safely restored without risk and we are working to clear the flags as quickly as possible.

[Bobafett345-1506]

Maybe the company should be a little more transparent about why it’s setting off the flags in the first place, and why they so frequently want our antivirus turned off.

Until then, people should be in contact with their antivirus provider about this frequent suspicious activity from actiblizz (and not too quick to restore anything unless their antivirus provider says so), and their tech support (with links).