Locked Thoughts about uTorrent?

[Ossie3]

Hello guys,

I recently scanned my laptop with Malwarebytes and the only ''virus'' it has found is uTorrent, now is my question: Is this a false-positive virus or should I consider the results of Malware Bytes, since the scandal around the cryptocurrency miner...

Here is the logbook:

Spoiler: Results of Malware Bytes

Malwarebytes

You must be registered for see links

-Log Details-
Scan Date: 12/27/22
Scan Time: 12:20 AM
Log File: db9c4c08-8573-11ed-bd0b-54ee75a867aa.json

-Software Information-
Version: 4.5.19.229
Components Version: 1.0.1860
Update Package Version: 1.0.63875
License: Trial

-System Information-
OS: Windows 11 (Build 22621.963)
CPU: x64
File System: NTFS
User: DESKTOP-J5R5E1M\Admin

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 287077
Threats Detected: 11
Threats Quarantined: 0
Time Elapsed: 2 min, 48 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 1
PUP.Optional.BundleInstaller, C:\USERS\ADMIN\APPDATA\ROAMING\UTORRENT\UTORRENT.EXE, No Action By User, 494, 1106934, , , , , 06F659E92A757AEC084403EC483E3D55, 98053C48D68FDCBFCE8905C70305F2AD69CC2775691106D321A52E09BC64F983

Module: 1
PUP.Optional.BundleInstaller, C:\USERS\ADMIN\APPDATA\ROAMING\UTORRENT\UTORRENT.EXE, No Action By User, 494, 1106934, , , , , 06F659E92A757AEC084403EC483E3D55, 98053C48D68FDCBFCE8905C70305F2AD69CC2775691106D321A52E09BC64F983

Registry Key: 1
PUP.Optional.BundleInstaller, HKU\S-1-5-21-1519228840-2741815269-1846089566-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\uTorrent, No Action By User, 494, 1106934, , , , , ,

Registry Value: 1
PUP.Optional.BundleInstaller, HKU\S-1-5-21-1519228840-2741815269-1846089566-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|ut, No Action By User, 494, 1106934, , , , , ,

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 7
PUP.Optional.BundleInstaller, C:\USERS\ADMIN\APPDATA\LOCAL\TEMP\UTORRENT\UTORRENT.EXE, No Action By User, 494, 1106934, 1.0.63875, , ame, , 06F659E92A757AEC084403EC483E3D55, 98053C48D68FDCBFCE8905C70305F2AD69CC2775691106D321A52E09BC64F983
PUP.Optional.BundleInstaller, C:\USERS\ADMIN\APPDATA\ROAMING\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk, No Action By User, 494, 1106934, , , , , C9E1219FB24272A2C766A954FD00CF5E, 3C4FE81845BA814528C361C360286917C3A0A45FA717C9DF16E075E7555AE1AE
PUP.Optional.BundleInstaller, C:\USERS\ADMIN\APPDATA\ROAMING\Microsoft\Windows\Start Menu\µTorrent.lnk, No Action By User, 494, 1106934, , , , , 7FAD4F0D7A9965D5343B3C55934B61A6, 11E1958EBC1EB54C83B2D2FE715628FB10073D882F98D1C0337F75C09232B13B
PUP.Optional.BundleInstaller, C:\USERS\ADMIN\DESKTOP\µTorrent.lnk, No Action By User, 494, 1106934, , , , , 89525B860D192687478208F632BC2E64, CF11C9D8D3B424B66EBB4434D9A8E5219CB1B440A313461315C1BF2B3E114DB3
PUP.Optional.BundleInstaller, C:\USERS\ADMIN\APPDATA\ROAMING\UTORRENT\UTORRENT.EXE, No Action By User, 494, 1106934, 1.0.63875, , ame, , 06F659E92A757AEC084403EC483E3D55, 98053C48D68FDCBFCE8905C70305F2AD69CC2775691106D321A52E09BC64F983
PUP.Optional.BundleInstaller, C:\USERS\ADMIN\APPDATA\ROAMING\UTORRENT\UPDATES\3.6.0_46590.EXE, No Action By User, 494, 1106934, 1.0.63875, , ame, , 06F659E92A757AEC084403EC483E3D55, 98053C48D68FDCBFCE8905C70305F2AD69CC2775691106D321A52E09BC64F983
PUP.Optional.OfferCore, C:\USERS\ADMIN\DOWNLOADS\PROGRAMS\UTORRENT_INSTALLER.EXE, No Action By User, 525, 1104240, 1.0.63875, , ame, , D9E40E69322F6A227A665097ADB91E70, 0365DAACDCDE2FB93B2D972A46490B9CC4CA6F76E13F7AB745ACF9DBCB92C32F

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)


(end)

Also, since we are talking about Malwarebytes, is there a premium version available with the latest update? Thanks in advance already.

 

[Mr. Spacely]

Direct - Malwarebytes 4.1 For Windows Updatable to V. 4.5 Premium

MalwareBytes is one of the top antivirus and antimalware in the market today that is compatible with other Antiviruses. It protect you , in addition to viruses, from hackers, malicious sites, infected ads, credit card skimmers and credential stealers. Wwhen Ransamware is ON, it protects your PC...

www.teamos.xyz

 

[juanamm]

@Ossie3, from what I see in the log they are false positives.

Here you have more info: https://www.teamos.xyz/threads/viru...ives-from-virus-total-other-antivirus.141528/

 

[*TheBeast*]

Just like everyone Else Noted , Nothing Looks Out of the Ordinary. False Positives "kinda"

1/ Newer Versions of Utorrent are Known to Be Bundled with God only Known what.... Bitcoin Miners that secretly run on your computer/browser and Slow your CPU down.
2/ Years ago i think they Bundled Utorrent with "searchprotect" some program that messed with your browsers homepage or something.
3/ I have No Clue what Utorrent has "secretly" bundled inside their "Newer" Versions these days though. Probably isn't bundled with anything SUPER Bad but nevertheless i Personally don't use it.

Utorrent started bundling suspicious stuff AFTER version 2.2.1 so..... if you want to use a CLEAN version of utorrent you need to google old version 2.2.1 and use the old version otherwise your best using alternatives such as Qbittorrent IMO.

 

[znop01]

False positives are the primary reason I stopped installing 3rd party AntiVirus/AntiMalware/AntiRansomware software on my computer as Windows Defender hasn't failed me yet. Instead, if necessary, I'll use an Active@LiveCD in conjunction with my PortableApps Flashdrive that can run those programs if necessary.

 

[Cyler]

It's not exactly a false positive per se, but it's not a virus either. As you see the scan results shows always the PUP.Optional.BundleInstaller

PUP = Potentially Unwanted Program. Keyword Potentially.
Optional.BundleInstaller = The installer might install additional software with or without your consent, or knowledge.

So long story short, Malware just reports that if you don't pay attention when you use said installer you might get more than you ask.
I don't think there is anything left to say so will close this thread.

Thank you all for your assistance and happy holidays.