btdna.exe McAfee On Access Protection warnings

[clabrown]

I've used Bit Torrent to download ISO's of Ubuntu to my WinXP box. Normally I just turn it on when a new Ubuntu is realeased to get the download, and leave it running for a while to help with the load while others get the new download as well. However it seems that some portion of Bit Torrent is apparently running in the background all the time doing strange, and possibly unauthorized things. When I originally installed the client, there were many assurances that the client had no spyware or malware, so I'm concerned what it's trying to do in the background when it's supposed to be turned off. Or perhaps this program is only something pretending to be part of Bit Torrent? I've tried to look up the IP address involved and it seems that they are in Europe, many of them are dynamic. Any ideas why it would be doing this when supposedly turned off? Thanks, Cla.

4/6/2010 1:11:57 AM Blocked by port blocking rule C:\Program Files\DNA\btdna.exe Anti-virus Standard Protection:Prevent IRC communication 79.155.70.222:6668

4/6/2010 4:52:48 AM Blocked by port blocking rule C:\Program Files\DNA\btdna.exe Anti-virus Standard Protection:Prevent IRC communication 95.18.147.114:6666

4/6/2010 6:59:40 AM Blocked by port blocking rule C:\Program Files\DNA\btdna.exe Anti-virus Standard Protection:Prevent mass mailing worms from sending mail 93.1.34.169:25

4/6/2010 8:14:39 AM Blocked by port blocking rule C:\Program Files\DNA\btdna.exe Anti-virus Standard Protection:Prevent IRC communication 217.208.151.38:6669

4/6/2010 10:17:48 AM Blocked by port blocking rule C:\Program Files\DNA\btdna.exe Anti-virus Standard Protection:Prevent IRC communication 95.135.169.5:6666

4/6/2010 8:03:05 PM Blocked by port blocking rule C:\Program Files\DNA\btdna.exe Anti-virus Standard Protection:Prevent IRC communication 85.233.49.43:6667

4/6/2010 9:46:53 PM Blocked by port blocking rule C:\Program Files\DNA\btdna.exe Anti-virus Standard Protection:Prevent IRC communication 83.101.77.38:6667

4/6/2010 11:33:05 PM Blocked by port blocking rule C:\Program Files\DNA\btdna.exe Anti-virus Standard Protection:Prevent mass mailing worms from sending mail 202.45.133.9:25

4/7/2010 12:01:58 AM Blocked by port blocking rule C:\Program Files\DNA\btdna.exe Anti-virus Standard Protection:Prevent mass mailing worms from sending mail 82.135.206.184:25

4/7/2010 6:45:56 AM Blocked by port blocking rule C:\Program Files\DNA\btdna.exe Anti-virus Standard Protection:Prevent IRC communication 80.202.190.157:6666

4/7/2010 7:03:28 AM Blocked by port blocking rule C:\Program Files\DNA\btdna.exe Anti-virus Standard Protection:Prevent IRC communication 84.202.58.136:6666

[DreadWingKnight]

That's McAfee being stupid and assuming that all traffic to specific ports is IRC or e-mail without actually looking at it.

[clabrown]

OK, McAfee being stupid ... I can buy that..., but _why_ is Bit Torrent trying to connect to various IPs when it's turned _off_?

[DreadWingKnight]

DNA doesn't turn off the same way as the BitTorrent client.

One of the reasons I don't like it.

[clabrown]

OK, I believe I've turned DNA off using MSConfig by unchecking it on the Startup Tab. Do you have any idea who DNA was trying to contact, or what about? Some of the IPs were listed as dynamic, which doesn't sound like it was phoning home to a company server to look for updates. Dynamic sounds like it was trying to link to other users ... perhaps trying to establish a torrent in the background? What is the purpose of the DNA portion of Bit Torrent as separate from the Client?

Thanks, Cla.