Jump to content

Virus Alert with latest uTorrent.exe 3.4.3 Build 40633


kosh_ac

Recommended Posts

Hello everyone!

 

As I started my uTorrent today it was blocked from my Avast Antivirus!

 

I then checked the file with eset smart, clamwin & VirusTotal, the first two did not report any infection, but VirusTotal found something, so I decided to post the result here!

 

uTorrent 3.4.3 Build 40633 VirusTotal Analysis

 

 

Hopefully it is only a false positive  :)

 

Kindest regards,

Guido

Link to comment
Share on other sites

IIRC you can link reports from Virus Total instead of dropboxing a crappy image ;3
 

en.wikipedia.org/wiki/OpenCandy will offer you additional crap to install IF you're going through the installation process for the first time. Failing to decline can lead to additional software being installed. Hopefully something easy to remove like Skype and not something difficult for the average user to remove like a browser toolbar. Something µTorrent has burdened users with in the past.

This can help prevent additional crap from being installed: http://unchecky.com/

Link to comment
Share on other sites

ESET used to monitor the installation and clean the unwanted stuff while being unpacked.

Now it seems it gave up and just flagged uTorrent as malware.

But they don't care at all, do they?

 

Just updated to Build 40760!

 

No Antivirus Warnings anymore, so I think they do care, but only backstage  ;)

Link to comment
Share on other sites

Whats up with that utorrent ? I noticed that a lot of machines AV's recognized utorrent as a virus even google chrome blocks some of utorrent download links.

 

Trojan.Win32.Generic!BT
OpenCandy

 

 

Utorrent staff and programmers are in lot of trouble if they want to keep people using their software.

 

 

EDIT:

If it's true that they fixed it in 40760 build, then no worry.

Link to comment
Share on other sites

25/7/2015 7:09:55 μμ Real-time file system protection file C:\Users\alexios\Downloads\3F2A.tmp a variant of Win32/OpenCandy.C potentially unsafe application cleaned by deleting - quarantined ALEXIOS-PC\alexios Event occurred on a file modified by the application: C:\Program Files\Google\Chrome\Application\chrome.exe.

25/7/2015 7:09:40 μμ HTTP filter file http://download-new.utorrent.com/os/windows/track/stable/endpoint/utorrenta variant of Win32/OpenCandy.C potentially unsafe application connection terminated - quarantined alexios-pc\alexios Threat was detected upon access to web by the application: C:\Program Files\Google\Chrome\Application\chrome.exe.

Link to comment
Share on other sites

Whats up with that utorrent ? I noticed that a lot of machines AV's recognized utorrent as a virus even google chrome blocks some of utorrent download links.

 

Trojan.Win32.Generic!BT

OpenCandy

 

 

Utorrent staff and programmers are in lot of trouble if they want to keep people using their software.

 

 

EDIT:

If it's true that they fixed it in 40760 build, then no worry.

 

I just noticed the problem when I upgraded from an older version to 3.4.3 (40760)

What is going on here?

 

Is my anti-virus (Kaspersky) just being overly aggressive...?

 

Or is this actually something bad somehow snuck in this code?

I hope someone can answer this.

 

Thanks

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...