New Rogueware spotted possibly? - Page 1
Forum section: electronics / general

author: Ampera
author_rank: Super Contributor
timestamp: February 22, 2017, 07:03:00 pm
content: This runs under the task webhelper and originates from uTorrent. Any research into the matter yields few results, but nothing specifically of this nature.Are there any suggestions to removal, as Windows Defender (Server 2016) and Malwarebytes were both inconclusive. I am now running Spybot S&D 2 to see if I have any luck.And before anybody asks, I've only ever use uTorrent for legal means, no I have never torrented anything illegally. Take that as you will.EDIT: There was also the windows narrator active to read that text for me. No I did not input any credentials, I am not that dense.

author: helius
author_rank: Super Contributor
timestamp: February 22, 2017, 07:16:49 pm
content: uTorrent has been malware-supported for the last 5 years.

author: Zero999
author_rank: Super Contributor
timestamp: February 22, 2017, 07:17:59 pm
content: I'm sure this sort of thing is nothing new but I wouldn't know about this crap. I use Linux at home. I only use Windows at work and the firewall doesn't allow torrents.

author: thm_w
author_rank: Super Contributor
timestamp: February 22, 2017, 07:18:22 pm
content: Get rid of utorrent or roll back to the old version pre-buyout (2.2.1 or so?).

author: Ampera
author_rank: Super Contributor
timestamp: February 22, 2017, 07:26:24 pm
content: Yeap. That's not a bad idea. looking for a new, decent torrent client.What I've done, which may not be the best idea, but it's the best one I have, is to delete the uTorrent folder, and to run it over with cipher to kill whatever's left. I'll shuffle through the registry to see if it's left anything nice for me, but other than that Malwarebytes, Windows Defender and Spybot 2 did squat. It's entirely possible this rouge is passive, and is just a credential harvesting tool and a platform to spread the stupid number.I will of course run everything over with a full scan on Windows Defender to make sure.And as for Linux, Windows Server 2016 is the closest you will get to a proper professional grade linux experience that has perfect compatibility with most windows programs.I also want to see if I can trick Avast into installing here, that is by far the best active AV software I have ever used.I will respond later if there is any other issues, but for now I seem to have removed it. Maybe I'll forward a copy to someone so they can add it to their detection systems.

author: Cerebus
author_rank: Super Contributor
timestamp: February 22, 2017, 07:55:58 pm
content: Quote from: TwoOfFive on February 22, 2017, 07:26:24 pmTry Transmission - Windows, Mac and any flavour of Linux (desktop or headless server) you care to name. I kept a headless version running on a Linux server to keep up to date Debian CD images around and it ran untouched for six months with no hitches until I shut it down to free up some bandwidth.

author: Halcyon
author_rank: Unknown
timestamp: February 22, 2017, 09:27:14 pm
content: Yep, uTorrent has been full of malware/crap ware for years. I use Deluge BitTorrent Client on Windows. It does exactly what it's supposed to do without any of the rubbish.

author: Vgkid
author_rank: Super Contributor
timestamp: February 22, 2017, 11:21:35 pm
content: I run Tixati, have run deluge/transmission/utorrent/vuze.