Torrent Search

forum.utorrent.com

µTorrent Community

You are not logged in.

Announcement

This forum is NOT for help with anything you've downloaded! Ask for help with downloaded files and the thread will be deleted.
Posting about any illegal sharing of copyrighted content is strictly FORBIDDEN.

Want to join the Falcon beta? Get your invite here!

#1 2008-04-27 08:43:13

Envyone
Member

avast! claiming that µTorrent contains Win32:Posion-DU trojan

[2008-04-27 @ 14:21 EST] <Ultima> This was a simple false-positive that has since been fixed by the ALWIL team.
Solution: Update your avast! virus signature/definition database.




Heyas, I tried downloading the lastest version of µtorrent since mine was a bit out of date, and my Antivir program kills the connection instantly due to Trojans that they find in the exe. I've had no problems with this program in the past what so ever but now it wont even start and is impossible to DL. (unless i remove my antivir, that aint happening though)

And now even my old version is killed by my antivir program and deleted without any mercy.

Is there viruses in it or is there something that might look like a virus in the code?
The antivir i use is "Avast!", free to dl and free to register and works like a charm.

Oh well, I just wanted you guys to know.

Last edited by Ultima (2008-04-27 11:21:30)

Offline

 

#2 2008-04-27 08:47:12

Ultima
Administrator

Re: avast! claiming that µTorrent contains Win32:Posion-DU trojan

No, µTorrent as downloaded from http://www.utorrent.com/download.php does not contain any viruses. If your antivirus software insists on it, then either its virus signature database contains incorrect/bad signatures, its heuristics engine is red-flagging any executable packed with UPX, or your computer is actually infected already, and some other virus is infecting any new executable you download. Assuming it's a virus signature and/or heuristics problem (they're the more likely causes), you might want to email the avast! people and complain about the problem.

I just downloaded both linked executables from the (official) µTorrent download page and scanned them using (the very well regarded) NOD32 -- nothing.

File: utorrent.exe
Size: 219952 bytes
Modified: Sunday, April 27, 2008, 11:44:54 AM
MD5: CA3F4554910E40A0053626C1BB66C5FE
SHA1: 20B562489C373E392C360C1A6EE22ABF327460BA
CRC32: 12BB1415


File: utorrent-1.8-beta-9704.upx.exe
Size: 265008 bytes
File Version: 1.8.0.9704
Modified: Sunday, April 27, 2008, 11:44:59 AM
MD5: 1562A17A09020A5146149660A1AAD82E
SHA1: 0D6B8DD21B2D8EEE0B9F5F61D4BB1DF6BA25C6F4
CRC32: 1894E2F3

These hashes match with the hashes of the files as they have been for few weeks/months now since they were first uploaded.

And uh, quick note: it's antivirus, not antivir. "AntiVir" is the name of an actual antivirus software (that's also free).

Offline

 

#3 2008-04-27 09:05:01

vampelle
Member

Re: avast! claiming that µTorrent contains Win32:Posion-DU trojan

Win32:Poison-DU

i have been using avast for more than year now and it never given me this issue on your torrent before.
and since using your 1.7.7 stable version since it came out, i did not had any issues with avast as well.
but all of sudden right now it is giving me this error.
and i have send the info to the avast team as well abt it

Offline

 

#5 2008-04-27 09:11:42

vampelle
Member

Re: avast! claiming that µTorrent contains Win32:Posion-DU trojan

i hope so, since using norton and few others i found avast much better than any just like utorrent is best from others i have used previously

Offline

 

#6 2008-04-27 09:18:45

nivroeg
Member

Re: avast! claiming that µTorrent contains Win32:Posion-DU trojan

yea i just woke up to an avast update and a virus warning not too long ago. it sounds like avast screwed something up.

Offline

 

#7 2008-04-27 09:53:21

vampelle
Member

Re: avast! claiming that µTorrent contains Win32:Posion-DU trojan

but strangely i downloaded the beta version 1.8 and it isnt giving me any more errors????
but i liked the 1.7.7 version more than the beta tongue

Offline

 

#8 2008-04-27 09:58:50

shadysheepie
Member

Re: avast! claiming that µTorrent contains Win32:Posion-DU trojan

I've got the same problem.  Been using utorrent stable version for about two weeks, suddenly this afternoon, when it's been on all afternoon I get

27/04/2008 17:23:19    SYSTEM    1528    Sign of "Win32:Poison-DU [Trj]" has been found in "C:\Program Files\uTorrent\uTorrent.exe" file. 
27/04/2008 17:23:53    SYSTEM    1528    Sign of "Win32:Poison-DU [Trj]" has been found in "C:\Program Files\uTorrent\uTorrent.exe" file. 

So I let it delete the file - made sure utorrent was completely gone from my machine, went to download it again and got

27/04/2008 17:50:13    SYSTEM    1528    Sign of "Win32:Poison-DU [Trj]" has been found in "http://download.utorrent.com/1.7.7/utorrent.exe" file.

Having read the above, I then downloaded 1.8 beta and no problems. 

Weird.

Last edited by shadysheepie (2008-04-27 10:01:57)

Offline

 

#9 2008-04-27 10:02:55

vampelle
Member

Re: avast! claiming that µTorrent contains Win32:Posion-DU trojan

yes if you using avast i think the new virus update have some issues.

also download the beta version as they is no problem with it so far.

but do complaint to avast if you are using avast otherwise state your antivirus please

Offline

 

#10 2008-04-27 10:06:01

Ultima
Administrator

Re: avast! claiming that µTorrent contains Win32:Posion-DU trojan

It's almost definitely an avast! issue only. Several users have come by the IRC channel to ask us about it as well.

Offline

 

#11 2008-04-27 10:08:25

vampelle
Member

Re: avast! claiming that µTorrent contains Win32:Posion-DU trojan

ultima can you also contact avast and clear this issue with them.

i was sad and upset when i saw the virus warning

Offline

 

#12 2008-04-27 10:13:13

shadysheepie
Member

Re: avast! claiming that µTorrent contains Win32:Posion-DU trojan

Every cloud has a silver lining.  I quite like 1.8 and I wouldn't have tried it otherwise!  smile

Offline

 

#13 2008-04-27 10:28:35

harry71
Member

Re: avast! claiming that µTorrent contains Win32:Posion-DU trojan

hey guys i was using Utorrent ver 1.7.7 and is a very good torrent software...but all of the sudden i got a trojan alert frm my Avast anti virus.....so I deleted the Utorrent and tried to download the Utorrent but again i got the same alert which was not there till today afternoon....is this bcos anti virus definations.......can someone help regarding this...

Offline

 

#14 2008-04-27 10:31:57

shadysheepie
Member

Re: avast! claiming that µTorrent contains Win32:Posion-DU trojan

It appears it's a false positive.

Download beta 1.8 and you won't get the same message.  That's what I did.

Offline

 

#15 2008-04-27 10:37:39

MrMagister
Member

Re: avast! claiming that µTorrent contains Win32:Posion-DU trojan

Phew! I just got the AVAST message two mins ago. Glad it's a false alarm!

Offline

 

#16 2008-04-27 10:39:01

magoo68
Member

Re: avast! claiming that µTorrent contains Win32:Posion-DU trojan

Hi, I have the same problem here.  To solve it while Avast people fix the error, I did the following:

Step 1

Right-click the avast! a-ball icon
Click Program settings
Click Exclusions
Click Add
Add the file, in this case c:\ProgramFiles\uTorrent\*
Click Ok

Step 2

Double-click the small avast a-ball icon next to the clock, Double -click on the standard shield icon, Click on Advanced, Click Add, and add the location of the files here too.  It may be like this:  c:\ProgramFiles\uTorrent.

Step 3

Double-click the small avast a-ball icon next to the clock, Double-click the Web Shield Icon, Click Exclusions, Add the URL or Web Address:  http://www.utorrent.com. Click OK

That's all.

Offline

 

#17 2008-04-27 10:42:06

MrMagister
Member

Re: avast! claiming that µTorrent contains Win32:Posion-DU trojan

Downloaded 1.8 seems cool

Offline

 

#18 2008-04-27 11:05:07

arnie1985
Member

Re: avast! claiming that µTorrent contains Win32:Posion-DU trojan

Simplest solution to the problem... download the utorrent Beta 1.8, works without a hitch, and no pesky false virus alerts...

Offline

 

#19 2008-04-27 11:07:24

Ultima
Administrator

Re: avast! claiming that µTorrent contains Win32:Posion-DU trojan

http://forum.avast.com/index.php?topic= … #msg294716
Seems like it *might* have been fixed in another signature update already.

Offline

 

#20 2008-04-27 11:15:53

goifra
Member

Re: avast! claiming that µTorrent contains Win32:Posion-DU trojan

I confirm the post of Ultima : i got the same problem and i've just downloaded the new updates from avast and removed µtorrent from my quarantine, and now everything is working just fine... smile

Offline

 

#21 2008-04-27 11:36:34

vampelle
Member

Re: avast! claiming that µTorrent contains Win32:Posion-DU trojan

ok gr8 than i can go back to 1.7.7 smile
didnt like the new look though sad and the grin line are too light

Offline

 

#22 2008-04-27 11:43:23

shadysheepie
Member

Re: avast! claiming that µTorrent contains Win32:Posion-DU trojan

I like 1.8.   Doesn't seem such a resource hogger either.

Offline

 

#23 2008-04-27 13:00:29

jewelisheaven
Member

Re: avast! claiming that µTorrent contains Win32:Posion-DU trojan

Hey, more people trying out 1.8, that's never bad big_smile Yes please please report this to Avast... I was searching for a contact form and only found support@avast.com
Did 080427-1 fix this? http://www.avast.com/eng/update_avast_4_vps.html

Edit: I think the average RAM savings between 1.8 and 1.7.7 is ~ 10%... which doesn't mean much until you load thousands of torrents tongue http://forum.utorrent.com/viewtopic.php … 74#p289574

Offline

 

#24 2008-04-27 13:21:53

shadysheepie
Member

Re: avast! claiming that µTorrent contains Win32:Posion-DU trojan

I don't download or upload thousands - I don't have a good enough internet connection for that - but a few times recently the other version has been running and my fans have kicked in and when I check Task Manager it's running over 50%.  With 1.8 running, task manager goes no higher than 23% and then only occasionally.  So that's good smile

Offline

 

#25 2008-04-27 13:28:11

Ultima
Administrator

Re: avast! claiming that µTorrent contains Win32:Posion-DU trojan

The high CPU usage doesn't sound like normal behavior to me... If you want to try troubleshooting that, post in a new thread with the following pieces of information:

a) get HijackThis from trendsecure.com, run it, view the log, and post the contents in the new thread
b) get Process Explorer from sysinternals.com, run it, Ctrl+D (to show the lower DLL pane), select the µTorrent process from the list, Ctrl+S (and save the list somewhere you'll find easily -- like the Desktop), then post the contents of the saved process list in the .txt file in the new thread

Additionally, in check Start > Run > devmgmt.msc, check your primary and secondary IDE ATA/ATAPI controllers' properties to see if any of the connected devices' current transfer modes are in PIO. Post all of this in the new thread.

jewelisheaven wrote:

Did 080427-1 fix this? http://www.avast.com/eng/update_avast_4_vps.html

Yes.

Last edited by Ultima (2008-04-27 13:44:33)

Offline

 

Board footer

Powered by FluxBB