uTorrent Marked as Trojan by Avast Antivirus

Written by Ernesto on April 28, 2008 

Thousands of uTorrent users got a worrying message from their antivirus software recently. Their favorite BitTorrent client was recognized as a trojan by Avast, and deleted form their computers. Attempts to redownload the software from uTorrent.com resulted in the same trojan warning.

Of course, there is nothing wrong with uTorrent. The application somehow got listed in Avast’s list of trojans, resulting in a false positive. uTorrent 1.7.7 was mistakenly listed as “Win32:Poison-DU [Trj]“, whereas the newer Beta’s were unaffected.

Such ‘false positives’ often happen with other harmless applications - better safe than sorry- but since uTorrent doubled its user base in just 12 months and is installed on millions of computers, this problem affected a sizable number of people. It didn’t take long before the issue was reported to Avast, and after approximately 5 hours the problem was fixed.

Earlier this week it became clear that uTorrent’s WebUI (+ Azureus and TorrentFlux) were vulnerable to several exploits. Apparently the vulnerabilities in the webUI, allow outsiders to take over uTorrent and download random content onto one’s system.

uTorrent developer Greg Hazel told TorrentFreak that he is aware of the issue and working on a fix. For now, the BitTorrent client itself is perfectly safe and secure.

utorrent trojan

Previously: Pivotal Canadian BitTorrent Showdown Looming

Next: Book Authors See BitTorrent As a Promotional Tool

71 Responses

1 Apr 28, 2008 at 11:19 by Julien

µtorrent 1.8 Beta build 9704 wasn’t considered as a trojan but the 1.7 release was.

2 Apr 28, 2008 at 11:20 by Bob

Yay, first.

I really have nothing to add to the article though. Glad the problem was fixed.

3 Apr 28, 2008 at 11:22 by Anonymous

Yeah, Avast WTF is with that?

4 Apr 28, 2008 at 11:32 by Mr.Afghanistan

Nice.
Thanks TF for informing us.

5 Apr 28, 2008 at 11:40 by Concerned

Well, there are those of us that still believe in conspiracy theories!

That’s why I use 1.6.1 - pre-BitTorrent Inc. :)

6 Apr 28, 2008 at 11:50 by Rycon

lol avast noobs

7 Apr 28, 2008 at 11:54 by ggg

@bob
ur second u dick.

8 Apr 28, 2008 at 11:54 by Ben Jones

[quote comment="362112"]Well, there are those of us that still believe in conspiracy theories!

That’s why I use 1.6.1 - pre-BitTorrent Inc. :)[/quote]

ANd many of us don’t know why. i for one randomly take clients and check what they are doing. If they were doing anything bad, it’ll be up here quicker than you’d think.

As often as not, these conspiracy theories are put about by anti-piracy orgs. Anything they can do to sow distrust, and make people suspicious works for them. It’s a lot easier to spread rumours that so-and-so client is doing something, than it is to get the client to do it, especially if what is claimed is illegal, or severely unethical.

There’s nothing wrong with 1.7.x or the 1.8 betas so far.

9 Apr 28, 2008 at 12:07 by fast

—————————————————————————————-
Ever wanted FAST *CHEAP* FTP axx to all the latest releases??
—————————————————————————————-

Nows your chance!!

All the latest Movie,0day Appz,MP3 Albums etc direct from a fast server to your desktop download as much as you want whenever you want, simple!

PS. Bypasses all p2p throttling!!!!

—————————-
fastwarez@hush.com
—————————-

10 Apr 28, 2008 at 12:14 by Ano

This is madness, wait or is it that riaa paid avast to tag utorrent as trojan?

http://www.hack5.blogspot.com

11 Apr 28, 2008 at 12:47 by andyness

Lol only fags use Avast

12 Apr 28, 2008 at 12:53 by Darth_yoda

Why is this news? Anti-malware programs always have false positives to some extent.

The only major anti-virus program that is detecting u-torrent as anything is eSafe. Check out the Virus total results here:

http://www.virustotal.com/analisis/3ae691510e8c5b10eddf050cc43e44ea

13 Apr 28, 2008 at 13:03 by Julius

For Windows there are only two scanners that are needed and do a great job;

- clamwin (perfect for on demand right-click on donwloads etc.) http://clamwin.com/

- avira (free antivir, required for noobs who need real-time active scanning). http://free-av.com/

For both you need to go deep in the config to set it up in a way that it doesn’t annoy you. And both give you complete control over what they’re doing. µTorrent-bashing would never happen with those two.

14 Apr 28, 2008 at 13:35 by MarXian

The Bittorrent protocol is good but all the Bittorrent’s clients are pure shit.
I’ve never trusted in uTorrent I prefer Azureus.

15 Apr 28, 2008 at 13:36 by Binsy

NOD32 is so much better and it doesnt hog your resources like a lot of others…

16 Apr 28, 2008 at 13:41 by Anonymous

[quote comment="362123"]@bob
ur second u dick.[/quote]
hahahaha, yeh wats with this retarded being first shit.

17 Apr 28, 2008 at 14:07 by 14yearold

Norton , Mcafee , Avast , and NOD32 ..

They sucks .. no0rton - sucks

avast - sucks hard

mcafee- - it didnt find a keylogger i made

NOD32 - didnt find my keylogger

AVG - f=-ound my keylogger , medium resources , and blah blah .. it rocks.

18 Apr 28, 2008 at 14:12 by Kevin

Yeah avast sucks, it flagged the XYNTservice as a virus too, which was really annoying for my software distribution.

Avast sucks.

19 Apr 28, 2008 at 14:27 by Buje

[quote comment="362178"]NOD32 is so much better and it doesnt hog your resources like a lot of others…[/quote]
Yeah, NOD32 is also the best to use with uTorrent. I’ve used AVG and I never got a good connection; DHT also made a lot of trouble. Since I’m using NOD32, my connection is always green and the download speed is improved :)

20 Apr 28, 2008 at 14:37 by gfors

you are all overweight windows users. get lives, put down the sandwich and get a mac.

21 Apr 28, 2008 at 14:47 by !!!!!!!!!!!!!!

this isnt that big of a news story…. aol adware software marks it as a trojan too

22 Apr 28, 2008 at 14:55 by berg

[quote comment="362204"][quote comment="362178"]NOD32 is so much better and it doesnt hog your resources like a lot of others…[/quote]
Yeah, NOD32 is also the best to use with uTorrent. I’ve used AVG and I never got a good connection; DHT also made a lot of trouble. Since I’m using NOD32, my connection is always green and the download speed is improved :)[/quote]

avg doesnt manage your firewall so whats that gotta do with your connect?

23 Apr 28, 2008 at 15:28 by whats yer favourite hobby sport

Anyone fancy helping out an independant artist? Acoustic music recorded live. Check out the link
http://thepiratebay.org/tor/4161946/Martin_Forry.Independant_Artist._Re-up(fixed_bitrate_and_tagging
and yes this is a plug.
Help this kid out please

24 Apr 28, 2008 at 15:49 by Yatti

I doubt µTorrent has any type of malware\spyware.. Spybot certainly doesn’t pick it up..

25 Apr 28, 2008 at 15:59 by SEAKING

You would think a program named Avast would not be AGAINST piracy.

i mean srsly.

Isnt that leik the only thing pirates say??

AVAST YE MAITEE!!!

26 Apr 28, 2008 at 16:08 by Strontium Dog

[quote comment="362088"]Yay, first.

I really have nothing to add to the article though. Glad the problem was fixed.[/quote]

Dimbulb wanker…

27 Apr 28, 2008 at 16:10 by Dubya Doofus

[quote comment="362131"]—————————————————————————————-
Ever wanted FAST *CHEAP* FTP axx to all the latest kiddiepr0n??
—————————————————————————————-

Nows your chance!!

—————————-
fuckhead@hush.com
—————————-[/quote]

Fuck off with the spam, cunter…

28 Apr 28, 2008 at 16:12 by Merkin

[quote comment="362177"]
[...]all the Bittorrent’s clients are pure shit.
[...] I prefer Azureus.[/quote]

… which you yourself have just called “pure shit” - congratulations.

Autolame Grade: B-

(What is this - fuckhead day on TF?)

29 Apr 28, 2008 at 16:13 by Tard SPNAKer!

[quote comment="362217"][quote comment="362204"][quote comment="362178"]NOD32 is so much better and it doesnt hog your resources like a lot of others…[/quote]
Yeah, NOD32 is also the best to use with uTorrent. I’ve used AVG and I never got a good connection; DHT also made a lot of trouble. Since I’m using NOD32, my connection is always green and the download speed is improved :)[/quote]

avg doesnt manage your firewall so whats that gotta do with your connect?[/quote]

Nothing. He’s a tard…

30 Apr 28, 2008 at 16:25 by Rycon

best antivirus is no antivirus.. only noobs get viruses.

seriously im not kidding.

if your comp gets fucked then its useless to try and repair it anyway, its still always going to be fucked up in some weird way. Sure alot of viruses can be fixed and cleaned, but sooner or later it just gets fucked up and its faster to reformat then figure out what the hell is wrong.

sadly, with windows systems, reformat is always the best choice. you can get it so fast now you can reformat a computer to a complete backup in under 10 mins.

Hirens + fast USB + ghost image = fast recovery

31 Apr 28, 2008 at 16:38 by Anonymous

Thanks for the non-news.

32 Apr 28, 2008 at 16:51 by stuckmoto

You can get version 1.6.1 @ filehippo.com.

AVG will spot some apps as trojans, but I think it’s the best free one.
McAfee - Norton - NOD32 - AVAST = tried them all -
YES they do suck!

33 Apr 28, 2008 at 16:56 by Lachtan

Avast sucks, but I’m still using it.
You just gotta know what kind of file you just scanned and also download source of that file.
When you are aware of these you can stay calm…

34 Apr 28, 2008 at 17:04 by someone

fix the typo, form to from :D

35 Apr 28, 2008 at 17:32 by zarathustra

+1 for AVG ;)

36 Apr 28, 2008 at 17:56 by Android

[quote comment="362152"]Lol only fags use Avast[/quote]
Only fags download copyrightin material.

37 Apr 28, 2008 at 19:09 by tux

lol get better anti virus.. avg or nothing….!!!! who ever made that antivirus should maybe fix it!

38 Apr 28, 2008 at 19:28 by SID

Meh, just a false positive.

39 Apr 28, 2008 at 19:49 by Hello!

WTF flagging the most used bittorrent client as a trojan LOL. Minus sales for the AVAST turds !

40 Apr 28, 2008 at 20:01 by SID

False positives happenes (sp?) all the time.

Comodo
Icesword
Gmer
Avast
Etc, etc.

41 Apr 28, 2008 at 20:03 by Anonymous

[quote comment="362330"][quote comment="362152"]Lol only fags use Avast[/quote]
Only fags download copyrightin material.[/quote]

ok, i will responde, in anger, brainless, to some wannabe weekend internet warrior…..or not. long live the pirate bay.

42 Apr 28, 2008 at 20:42 by Oops

[quote comment="362422"]WTF flagging the most used bittorrent client as a trojan LOL. Minus sales for the AVAST turds ![/quote]

Problem! Avast home edition is free.

43 Apr 28, 2008 at 21:05 by anon

[quote comment="362152"]Lol only fags use Avast[/quote]
so true nod32 ftw

44 Apr 28, 2008 at 21:08 by SID

Comodo AV said the Fraps.exe has a trojan, no matter what version, I dl’d a couple of diferent versionce from diferent cources.

Sorry for the crap spelling!

45 Apr 28, 2008 at 21:13 by Anonymous

[quote comment="362207"]you are all overweight windows users. get lives, put down the sandwich and get a mac.[/quote]

yes, we should all buy an overpriced, un-upgradable, dumbed-down, wanna-be pc with bloated software only available at a special overpriced store.

46 Apr 28, 2008 at 21:17 by dimwittedconsumer

Best way to avoid viruses? Buy shit.

47 Apr 28, 2008 at 22:39 by Bob

[quote comment="362123"]@bob
ur second u dick.[/quote]
Yeah… I got all excited when there was a brand-new article and didn’t refresh.

48 Apr 28, 2008 at 22:40 by RIAA CEO

HAHA my email of concern to Avast worked. They believed me and accepted my generous donation.

49 Apr 28, 2008 at 23:46 by pja4008

Consumer reports rated Kaspersky zone alarm and trend micro the best and avg was at the end of the list I’ll go with a non-profit org. that does extensive testing

50 Apr 28, 2008 at 23:50 by pja4008

There tests were based on virus detection,system resources,and how fast they update.

51 Apr 29, 2008 at 00:23 by Wired

@14yearold
LOL you think AVG is a good antivirus program and NOD32 sucks? Pull your head out of your ass.

52 Apr 29, 2008 at 00:29 by Restero

Why is it always Ernesto who blows unprocessed sugar up uTorrents ass?
Reference: http://torrentfreak.com/p2p-statistics-080426/

Something is wacky with this guy. First he argues: “obviously uTorrent is the most popular Bittorrent Client”

now he says: “Of course, there is nothing wrong with uTorrent.”

Angain without any proof whatsoever. In case you want to create a Torjan Horse without given proof that you did, you simply introduce a vulnerability that allows a 3rd party to get information useable in a court of what you have on your computer :)

Please Ernesto, you are getting more and more ridiculous. You didn’t question once if there may be a problem. I cannot believe this is happening.

TorrentFreak is infiltrated by RIAA and the movie industry?

53 Apr 29, 2008 at 10:17 by Anonymous

#45 LLLLOOOLLL, pure gold!

54 Apr 29, 2008 at 10:44 by ejonesss

this may be the work of the aa’s since to the aa’s utorrent is a piracy tool and it is possible that avast is reading an older virus revived in a legit file.

remember the sony cd copy protection bit?

in the sony cd copy protection a file was written that masked it’s self as a cd rom driver and attempting to remove it disabled the drive or something like it.

well it looks like the aa’s may be up to a similar trick by they released a virus a while back and called it by the same name as one of the dll’s or something from the utorrrent resources praying on user’s fears in hopes that anti virus programs will delete the program in an attempt to stop piracy.

55 Apr 29, 2008 at 15:44 by Anonymous

[quote comment="362088"]Yay, first.

I really have nothing to add to the article though. Glad the problem was fixed.[/quote]

no your second …

56 Apr 29, 2008 at 17:02 by great googley moogley

should have been on a mac..

57 Apr 29, 2008 at 18:41 by Anonymous

[quote comment="362191"]
avast - sucks hard

AVG - f=-ound my keylogger , medium resources , and blah blah .. it rocks.[/quote]

You’re reasoning for Avast! is vastly descriptive… In my experience, Avast! is the only AV client that can be effectively used as active protection, as it’s resource requirements are very minimal. Never had any false positives with it, never had anything get by it.

I’d like to see the system you run AVG on… I’ve tried AVG on several systems, and it can make a dual-core with 2GB RAM crawl…

58 Apr 29, 2008 at 20:43 by Tim

Fuck you all, avast is great.

59 Apr 30, 2008 at 01:44 by Anonymous

use bitlord smart asses

60 Apr 30, 2008 at 07:51 by Erevos

Maybe the so called “trojan” is the web service interface capabilities?

61 Apr 30, 2008 at 09:27 by xxx

[quote comment="362152"]Lol only fags use Avast[/quote]
yeah only fags, lames, BTW? AVAST SUCK!

62 Apr 30, 2008 at 18:03 by Alley

Oh, right, and then AVG has tons of false positives lmao :P

63 Apr 30, 2008 at 18:52 by Andrew

And they called me crazy for switching to Linux and using nTorrent.

64 May 01, 2008 at 03:45 by in.cog.nito

@2 “Bob”
only faggots claim ‘first’

65 May 02, 2008 at 15:50 by YABRI

Avira antivirus is THE BEST!!!!!!

66 May 05, 2008 at 18:18 by da fank

works fine here :)

67 May 09, 2008 at 20:19 by ForYouToEnvy

AVG??? Iv tried AVG and and spybot S&D found loads of crap AVG missed…. not had any probs since i started using avast

68 May 25, 2008 at 09:18 by Shroomey

I’ll stick to the utorrent 5.0 . I f I remember right BitTorrent Inc. owns uTorrent and hasn’t BitTorrent Inc. been cosey with RIAA. I’m good

Responses are closed

All remaining responses will continue to be archived. Use the TorrentFreak forums if you want to discuss something.