Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Malwarebytes detects utorrent

Hey, so I just ran Malwarebytes after a while and it is detecting utorrent for some reason.
I know utorrent can be a false positive, but I've heard some of the versions are not the best.
I also remember reading that someone was using an older version of utorrent from a few years back that still works better than any other.

What is your suggestion?

Code
-Scan Details-
Process: 1
PUP.Optional.BundleInstaller, C:\USERS\ALPHA\APPDATA\ROAMING\UTORRENT\UTORRENT.EXE, No Action By User, 503, 799052, , , ,

Module: 1
PUP.Optional.BundleInstaller, C:\USERS\ALPHA\APPDATA\ROAMING\UTORRENT\UTORRENT.EXE, No Action By User, 503, 799052, , , ,

Registry Key: 1
PUP.Optional.BundleInstaller, HKU\S-1-5-21-2272392849-1977043155-1536836044-1003\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\uTorrent, No Action By User, 503, 799052, , , ,

Registry Value: 1
PUP.Optional.BundleInstaller, HKU\S-1-5-21-2272392849-1977043155-1536836044-1003\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|uTorrent, No Action By User, 503, 799052, , , ,

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 4
PUP.Optional.BundleInstaller, C:\USERS\ALPHA\APPDATA\ROAMING\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk, No Action By User, 503, 799052, , , ,
PUP.Optional.BundleInstaller, C:\USERS\ALPHA\APPDATA\ROAMING\Microsoft\Windows\Start Menu\µTorrent.lnk, No Action By User, 503, 799052, , , ,
PUP.Optional.BundleInstaller, C:\USERS\ALPHA\APPDATA\ROAMING\UTORRENT\UTORRENT.EXE, No Action By User, 503, 799052, 1.0.20814, , ame,
PUP.Optional.BundleInstaller, C:\USERS\ALPHA\APPDATA\ROAMING\UTORRENT\UPDATES\3.5.5_45608.EXE, No Action By User, 503, 799052, 1.0.20814, , ame,

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)
It's used for an illegal activity, so it's obvious on why it would be detected.

https://www.ghacks.net/2019/12/09/utorre...currently/
https://www.extremetech.com/computing/26...as-malware
(Oct 22, 2020 09:08 PM)maldev009 Wrote:  snyke cannot be trusted. snyke? more like snake. and that snakes name is john armada revesz.
It's a false positive. Simple as that.
Fiat justitia ruat cælum

My era of providing technical support and malware removal on HackForums is over, so you can stop PM'ing me about it. Sorry.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by 4554551NMar 7, 2015 03:41 AM 3 98 Mar 7, 2015 03:41 AM
Last Post: 4554551N
by perk®Mar 11, 2014 11:52 AM 13 156 Mar 11, 2014 11:52 AM
Last Post: Aura
by GaspJan 19, 2014 08:50 AM 24 459 Jan 19, 2014 08:50 AM
Last Post: Gustav.