This is how "users that want to use stuff" end up infected. In your case, lose all your crypto.
There is no "common sense" when fighting malware. There is just security.
"Common sense" is assuming that Kaspersky or any other AV will work at the moment of truth.
"Common sense" is the exact behaviors that threat actors want "users who want to use stuff" to do.
Security is not software. It is a process (of doing a bunch of stuff you don't want to do and not doing a bunch of stuff that you want to do.)