Arlyn Posted January 31, 2008 Report Share Posted January 31, 2008 Hi, Everyone.I love uTorrent - for this past week, however, I've been getting a Trojan placed on my computer in the uTorrent file. Is anyone else having this problem? Link to comment Share on other sites More sharing options...
jewelisheaven Posted January 31, 2008 Report Share Posted January 31, 2008 uTorrent doesn't have trojans. That's not to say you didn't get it from something you ran after you downloaded. What AntiVirus software are you running? What removal programs have you run to get rid of it? I'd recommend prevx.com and RootKit Revealer from sysinternals.com Link to comment Share on other sites More sharing options...
Arlyn Posted January 31, 2008 Author Report Share Posted January 31, 2008 Thank you for responding. I'm certain it's from running uTorrent. Every time I open uTorrent, I get a trojan. I never get a trojan running anything else and I run my McAfee AntiVirus program each time I run any program. The trojan embeds itself directly within my uTorrent file.I'm grateful for your AntiVirus recommendations and will check out both sites in your note. I've got my fingers crossed. Link to comment Share on other sites More sharing options...
DreadWingKnight Posted January 31, 2008 Report Share Posted January 31, 2008 Ok then, what trojan is it claiming uTorrent has? Link to comment Share on other sites More sharing options...
jewelisheaven Posted January 31, 2008 Report Share Posted January 31, 2008 .. McAfee isn't a real AV </rant> Link to comment Share on other sites More sharing options...
Arlyn Posted January 31, 2008 Author Report Share Posted January 31, 2008 Here's the trojan information from prevx.com:CharacteristicsCategory: Trojan Also known as: Win32.ExplorerHijack [CounterSpy], Trojan-Downloader.NSIS.Agent.ac [Kaspersky], Trj/Downloader.OZE [Panda], DLoader.CLIF [NORMAN] Link to comment Share on other sites More sharing options...
DreadWingKnight Posted January 31, 2008 Report Share Posted January 31, 2008 That doesn't answer my question.McAfee is claiming a trojan.WHAT TROJAN IS IT SPECIFICALLY CLAIMING? Link to comment Share on other sites More sharing options...
Arlyn Posted January 31, 2008 Author Report Share Posted January 31, 2008 Well, I'm pretty new to trojans, so, please bear with me. This is all the information I have:Name: uTorrentCategory: TrojanDescription: http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453113773Folder: c:\users\ricky lynn\application data\utorrentIf that doesn't help, then I don't know what else to do. I do appreciate your looking into this. Link to comment Share on other sites More sharing options...
DreadWingKnight Posted January 31, 2008 Report Share Posted January 31, 2008 Not this stupidity from antivirus software again.It's time to replace your antivirus suite completely. Link to comment Share on other sites More sharing options...
Arlyn Posted January 31, 2008 Author Report Share Posted January 31, 2008 I don't know about "again" - this is new for me and I've been using uTorrent for a long time. It has only happened since the upgrade to version 1.7.7 this past week.Oh, well . . . thanks anyway. Link to comment Share on other sites More sharing options...
jewelisheaven Posted January 31, 2008 Report Share Posted January 31, 2008 that report was some patched/hacked version of a beta client.NO package from uT comes with "supporter" exe's. Link to comment Share on other sites More sharing options...
Arlyn Posted January 31, 2008 Author Report Share Posted January 31, 2008 Thanks, Jeselisheaven. I'll uninstall uTorrent and re-install it directly from the uTorrent web-site. Hopefully, that will work. Link to comment Share on other sites More sharing options...
jewelisheaven Posted January 31, 2008 Report Share Posted January 31, 2008 yea, if your "package" came as a RAR or SFX rar, then it definitely isn't official :/ The official client starting with 1.7 has an installer built in. IIRC 1.6 used NSIS (which caused the installer to be ~ 600 KB) This is actually discussed in uT sizes Link to comment Share on other sites More sharing options...
Arlyn Posted January 31, 2008 Author Report Share Posted January 31, 2008 Hmmm. It didn't come as an RAR or SFX. The only place I could have downloaded it (other than at the official uTorrent web-site) would have been at File Hippo. It was so long ago when I downloaded the original program, that I just can't remember which location. Since you tell me that it is impossible for a bad copy to have come from uTorrent, it must have come from the File Hippo site. That is the only other place I've used.I appreciate your and DreadWingKnight's kindness in sorting all this out. Thank you both. Link to comment Share on other sites More sharing options...
Firon Posted January 31, 2008 Report Share Posted January 31, 2008 if the file was obtained from utorrent.com, it's just a false positive.Other sites, I don't know. Could be, could not be. Link to comment Share on other sites More sharing options...
Arlyn Posted January 31, 2008 Author Report Share Posted January 31, 2008 Ahhhhh! I see. Thank you so much. I'm just about finished cleaning out my harddrive and will re-download uTorrent. If I continue to get that trojan alert, I'll just ignore it as a false positive.That information is a real relief. I appreciate you, Dear One! Link to comment Share on other sites More sharing options...
jewelisheaven Posted January 31, 2008 Report Share Posted January 31, 2008 01/25/2008 07:56 PM 219,952 utorrent_1.7.7-b8179.execa3f4554910e40a0053626c1bb66c5fe *utorrent_1.7.7-b8179.exeif it does't match those file specs its not legit. As Firon says if McAfee is reporting THAT file as a trojan, it's probably blanket marking due to UPX compression. Link to comment Share on other sites More sharing options...
Firon Posted January 31, 2008 Report Share Posted January 31, 2008 There were two 1.7.7s one packed with upx 3.00, one with 3.02 (one on server is 3.00) Link to comment Share on other sites More sharing options...
Arlyn Posted January 31, 2008 Author Report Share Posted January 31, 2008 I'll go with the server. Link to comment Share on other sites More sharing options...
jewelisheaven Posted February 1, 2008 Report Share Posted February 1, 2008 That IS the stats for the 3.0 version. I figured you guys gave up on 3.02 after all the stupid software blocked 1.7.6 from running. Link to comment Share on other sites More sharing options...
Firon Posted February 1, 2008 Report Share Posted February 1, 2008 Oh, maybe it was 1.7.6 then. The past week-something has been nothing but a blur. >_> Link to comment Share on other sites More sharing options...
tomh Posted February 1, 2008 Report Share Posted February 1, 2008 A great possibility to check a file for viruses with tons of search engines is http://virustotal.com. In this case its great to find out what engines report false positives for a particular release. The site uses the newest signatures for all engines of course so it may won't give the same result as the ones that used in desktops without the latest updates downloaded. Link to comment Share on other sites More sharing options...
jewelisheaven Posted February 1, 2008 Report Share Posted February 1, 2008 For the record, 1.7.6 stats are:1563aa0d20c571551dc33eeff5255694 *Beta\TAS\utorrent_1.7.6-b7859.exe60eca8c1980be34bef2118698fabb844 *Old Versions\utorrent-1.7.6.uncompressed.exe474975a886dfe1452517358724ef195b *utorrent_1.7.6-UPXv3.0.0.exe01/22/2008 01:00 AM 219,952 utorrent_1.7.6-UPXv3.0.0.exeAs you see, the packed size of uT hasn't changed Link to comment Share on other sites More sharing options...
Guest Posted February 1, 2008 Report Share Posted February 1, 2008 .. McAfee isn't a real AV </rant>McAfee is the original anti-virus. Link to comment Share on other sites More sharing options...
pbo Posted February 1, 2008 Report Share Posted February 1, 2008 I got this errormessageµT 1.7.7, WinXP SP2, 1 GB RAM Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.