Are reloaded torrents virus utorrent downloads#
Are reloaded torrents virus install#
Are reloaded torrents virus utorrent#
Are reloaded torrents virus full#
Are reloaded torrents virus software#

It acts kind of like click-through ads on a website. It's a potentially unwanted program (PUP).Īs Beasly, and others, have discussed, OpenCandy is an important source of revenue for uTorrent. I would describe it as Malwarebytes does.

Are reloaded torrents virus utorrent#

I can confirm this because the offending file does not appear if you disable / disconnect your network connections before launching the uTorrent installer. Simple answer: No, it contains a fairly harmless PUP that you probably shouldn't be afraid of.įirstly, the uTorrent.exe file does not contain the OpenCandy DLL.

Are reloaded torrents virus software#

Also, since the file is not code signed, some antimalware software may warn that it is unknown or untrusted, and offer to sandbox it. Obviously, if I had the premium version of Malwarebytes it would have been detected automatically by it's realtime protection when the file was created. It's also worth pointing out that I detected this by manually scanning the file. Right-clicking on this file and scanning it with Malwarebytes detected, as shown in the screenshot below.įor the eagle-eyed among you, you will notice that after I scanned it with Malwarebytes, I renamed the uttA93.tmp file to just so that I could right-click on it and get the properties for the DLL. The important one in this case was uttA93.tmp. After a few seconds, some files appeared in the %TEMP% folder. I then ran the uTorrent installer, and did not click on anything in the installer. So before running the uTorrent installer I took a screenshot showing the clean %TEMP% folder.

Are reloaded torrents virus utorrent downloads#

I knew from experience that uTorrent downloads the OCSetupHlp.dll file to the %TEMP% directory but names it uttXXXX.tmp (where XXXX is some random combination of capital letters and numbers, normally 3-4 hexidecimal digits). Both of these were up-to-date, and have no relevance to the testing.

Are reloaded torrents virus full#

For full disclosure the only other applications installed on this VM were Microsoft Security Essentials and VirtualBox Guest Additions. (free), with up-to-date definitions, as the example antimalware application.

I ran the tests on a VirtualBox virtual machine (VM) running a clean installation of Microsoft Windows 7 SP1, with all updates installed. To test this issue I used uTorrent 3.8 (stable), which was the latest version available at the time of writing. I had personally experienced this myself before and knew it to be true, so I decided to investigate thoroughly detail my findings and make some suggestions to both uTorrent uses and developers.

Are reloaded torrents virus install#

I can confirm that the potentially unwanted program (PUP), OpenCandy, is detected by some antimalware applications during the install of uTorrent that it is not an optional component and that detection occurs before anything is accepted or clicked during the installation process. While this works with some applications, it does not seem to work with all that you may come across.Ĭonduit Toolbar/Bunndle Crap can also be installed if you're not careful at installation but that's for another Day. Some programs support the /NOCANDY parameter which you can add to the run command when you start the installer to bypass OpenCandy during installation. The answer must be yes then, as OpenCandy displays automatic advertisement for another software product during the installation process. According to Wikipedia, adware is any software package which automatically renders advertisements. The answer depends on the definition of adware. If the installation completed successfully If the recommendation was downloaded and the installer initiated If a third party recommendation was made, and whether it was accepted or declined If the installer was completed or canceled OpenCandy sends anonymous statistics back to the server which is used to improve the technology and to provide software companies with analytic insights.

The first recommendation to pass all tests is then selected and presented to the user in the installer. OpenCandy is a technology that software companies can add to installers to earn money from optional software offers that are based on a system scan and the user's location in the world.Īccording to the FAQ on the OpenCandy website, the installer queries the company server for a list of recommended apps for the user location, operating system and language and checks those against the installed applications on the system and prerequisites that those programs may depend on.