µTorrent by BitTorrent Inc (Signed)

Remove uTorrent.exe
Warning 4 antivirus scanners has detected malware in various versions of uTorrent.exe.


There are 31 versions of uTorrent.exe in the wild, the latest version being uTorrent.exe is run as a standard windows process with the logged in user's account privileges. By adding a startup entry to the run registry key, the file will be executed when the user logs into Windows. The average file size is about 802.53 KB. The file is a digitally signed and issued to BitTorrent Inc by VeriSign. The programs µTorrent, Stardock Decor8 and MyHarmony have been observed as installing specific variations of uTorrent.exe. During the process's lifecycle, the typical CPU resource utilization is about 0.0084% including both foreground and background operations, the average private memory consumption is about 29.72 MB with the maximum memory reaching around 41.56 MB. Addionally, typically read and write I/O disk operations is about 11.16 MB per minute for reads and 2.57 MB per minute for writes.

What is uTorrent.exe?

µTorrent is a is a free, ad-supported, lighter-weight BitTorrent client designed to consume less resources then the full BitTorrent version. Some uTorrent installs include adware in the form of the Conduit Engine, which installs a toolbar, and makes homepage and default search engine changes to a user's web browser.

About uTorrent.exe (from BitTorrent Inc)

µTorrent is designed to consume as few resources as possible to avoid impacting your computer use. µTorrent will work on Windows XP and up, including Windows 7. BitTorrent's two main products today in


File name:uTorrent.exe
Publisher:BitTorrent, Inc.
Product name:µTorrent
Typical file path:C:\Program Files\utorrent\utorrent.exe
Issued to:BitTorrent Inc
Authority (CA):VeriSign
Effective date:Sunday, June 20, 2010
Expiration date:Friday, July 26, 2013

ResourcesPrograms installed in

(Note, the programs listed below are for all versions of µTorrent.)
Apple Inc.
9% remove
Apple's iTunes is a proprietary media player computer program, used for playing and organizing digital music and video files on desktop computers. It can also manage contents on iPod, iPhone and iPad....
9% remove
LAME is a library that allows some programs to encode MP3 files. LAME is free, but in some countries you may need to pay a license fee in order to legally encode MP3 files.
BitTorrent Inc.
12% remove
µTorrent is a is a free, ad-supported, lighter-weight BitTorrent client designed to consume less resources then the full BitTorrent version. Some uTorrent installs include potentially unwanted applic...
Computer Systems Odessa corp.
8% remove
ConceptDraw MINDMAP offers a variety of outputs, making it easy to share map content in the appropriate format. Creating output is simple; just one click allows you to output to other applications, su...
GMW Software
8% remove
Does your Internet services provider supply you with the service speeds that were advertised? Does it do this 24 hours a day 7 days a week? With this free program you can perform regular internet spee...
Kovid Goyal
5% remove
calibre is a free and open source e-book library management application developed by users of e-books for users of e-books. It has a cornucopia of features divided into Library Management, E-book conv...
Logitech Inc.
3% remove
Microsoft Corporation
3% remove
Windows Media Encoder is a freely downloadable media encoder developed by Microsoft which enables content developers to convert or capture both live and prerecorded audio, video, and computer screen i...
9% remove
Firefox 21 was released on May 14, 2013. The Social API now supports multiple providers, enhanced three-state UI for Do Not Track (DNT). Mozilla Firefox is a free and open source is a web browser coor...
Opera Software ASA
3% remove
The Opera browser is a free web browser that handles common Internet-related tasks such as displaying web sites, sending and receiving e-mail messages, managing contacts, chatting on IRC, downloading ...
3% remove
CCleaner developed by Piriform, is a utility program used to clean potentially unwanted files and invalid Windows Registry entries from a computer. CCleaner supports the cleaning of temporary or poten...
5% remove
Defraggler is a defragmentation utility which allows users to defragment individual files on their computer system. Defraggler can defragment individual files, groups of files (in a folder) or an enti...
8% remove
Recuva is a data recovery program and is able to recover files that have been "permanently" deleted and marked by the operating system as free space. As with other file recovery programs Recuva works ...
PowerUp Software
9% remove
Pinnacle is a software program that enables you to play your favorite games with any gamepad, joystick, or other type of game controller. Pinnacle comes preconfigured for most popular game titles and ...
Spotify AB
3% remove
Spotify is a Swedish music streaming service offering digitally restricted streaming of selected music from a range of major and independent record labels, including Sony, EMI, Warner Music Group and ...
Stardock Corporation
6% remove
Windows 8 limits your start screen customization options to only a few provided background images and a few pre-defined color schemes. Decor8 removes these limitations and provides the freedom to per...
The MathWorks, Inc.
9% remove
MATLAB® is a high-level language and interactive environment for numerical computation, visualization, and programming. Using MATLAB, you can analyze data, develop algorithms, and create models and ap...
1% remove
Valve Corporation
11% remove
Counter-Strike is a tactical first-person shooter video game developed by Valve Corporation which originated from a Half-Life modification. The game has been expanded into a series since its original ...
Wandou Labs
25% remove
The software currently distributes the app through the OpenCandy monetization platform which is known to distribute adware.


(Note, the behaviors below are for all versions of uTorrent.exe, select a unique version for details.)
Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'uTorrent' → "C:\Program Files\uTorrent\uTorrent.exe" /MINIMIZED
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
  • Firewall exception for 'C:\PROGRAMAS\utorrent\utorrent-plus\utorrent-plus-3.1.exe'
  • Firewall exception for 'C:\Documents and Settings\Administratör\Skrivbord\26051-671819-utorrent.exe'
  • Firewall exception for 'C:\Program Files\uTorrent\uTorrent.exe'
  • Firewall exception for 'C:\Program Files\uTorrent\uTorrent.exe'
  • Firewall exception for 'C:\Documents and Settings\věruška\Dokumenty\Stažené soubory\uTorrent.exe'
  • Firewall exception for 'C:\Documents and Settings\user\Desktop\uTorrent.exe'
  • Firewall exception for 'C:\Software\uTorrent.exe'
  • Firewall exception for 'C:\Program Files\uTorrent\uTorrent.exe'
  • Firewall exception for 'C:\Program Files\uTorrent\uTorrent.exe'
Scheduled tasks
  • The job '{3E0C592A-6E89-47B8-B8E8-7EFA3DE8B8BB}' runs on registration in the path '\{3E0C592A-6E89-47B8-B8E8-7EFA3DE8B8BB}'

MalwareMalware detections

Based on 40+ industry antivirus scanners, 4 of them detected the following malware.
Antivirus engineEngine versionDetectionFile version
Antiy Labs AVL Trojan/Win32.Agent
eSafe Win32.TrojanHorse
Trend Micro HouseCall 9.700.0.1001 HV_ZYX_BL132900.TOMC
Trend Micro HouseCall 9.700.0.1001 HV_ZYX_BL132900.TOMC

VersionsAll file variations of uTorrent.exe

MD5SHA-1File size
88155d3d23ca8a1dfb1f45ee3e4c8df8 3176d4803e93f04fb2a4882d78ee4117650b8a32 946.39 KB
4d35a77850cab6616f4685c5adc40d1f 5e0f46c211f136bfcc4986867e335bbf2de22119 946.39 KB
9ff8159ecfbd1272b73953bf6528a077 819726868a33cf1bc5731171fbf5fcb09f677f42 946.39 KB
1aaf1d8023610cdc46954e432a190dad 9e780c0399a9a132581d9dc8d9094edb3965b795 946.39 KB
ef7b7a53b0e4316e08cb2d96c28403d8 1fefdb2467cd5902ad5b296121afbf2d9a0c8395 946.39 KB
3fa968d5ddf4f5b3cc6a17a88e2a9573 21562802186dbb57ee1317a39c4f2491c79f450a 946.39 KB
7527f74ec97b7609838966063522bb18 58129736b0b7bfd26b41a4129e0fcdf89c86cd7f 945.89 KB
87554e2e6d2ab8eb1292d1b0eaa05f2d 29039826932c2a683d39d3d1202dbd1f25547acb 945.89 KB
18a55813bab62b5c77d5351ef7fb24fd 90a3715dab661394ea6ca8c2eac942d263a564e2 945.89 KB
ab6bc52b9bd6ef0106847cde0566a9a3 eb8c667db4ef5ad6bccec21bc4be3f995097d4f9 945.89 KB
65b14e1803c1490547ed02a7d7ff8f5f e62e0ee871d1aeba477a01bf749fa7ac3eb3babf 945.89 KB
2ae03e4766a13f47b518f9d4c382f836 aee9cf63cf857a9278b964225b729c35eee4b3cb 941.39 KB
1da3ab4c8505b45a4d054a6f4d122b22 7595a65bda8b60cf53ff5385b9ba3c8f0d62bb82 941.39 KB
2c1ef6485eeb834187fc69556a64eafe c959e7d82203d234eb4912c61f05a450417c8c36 875.89 KB
59fe95f7fede6d69c007e2cd05356f07 300628f86507c70acd7be3f09adf54e81625f11e 875.39 KB
5a836fd41bd78af1036c3f2fcee3074e 39a296ec9235e69eb9cabf6ea9e92bbc879ff796 874.39 KB
0334d9b74eea6150759f6f4a5dd16c0c e64507db6dbbcc0c3f0d115e250c27887648ef92 998.39 KB
914cc6e2f6bb309ae363b26fd4b7e883 09ae71aad1a61171eaf0199b4ae1bcbc3f3cffdb 996.89 KB
39a81d679519419c0e8e42ed705a54f8 088e2550a6cfbb727d2a8810da82fbcaa04af34c 859.86 KB
2098838a9e40849592f1fe5da43e9627 361eae12454b3ee32592b4e8838ef2d2ed605ad9 859.86 KB
09aeafe6fa5afbc9d088fb7b86c1e24e 3385971f436d746a92571b47b0f71ca228434fb5 859.36 KB
bb6da792792a5ac450174f10756eec15 9a3f6e0f9f3ef9e5edd700e91587e62a45306c8e 722.87 KB
a6a115b24cee6b5fac632e621011e381 2fe6118651ec252c540ebf5bbc83d30f115639ed 722.87 KB
4679d9a51c33938bb5ab230e817c36d0 b7dbb993e72f6feb6dcdcca8ded2f1016e8a53bc 718.37 KB
07b96dbe4770d3b0b1a50d6c5ff15fc3 91a46e70e23c2cba3591b818359c7e9cbb01a890 718.87 KB
11e8a3d1f90a9827f4e6ad484e311eee d77877ed880c6be0d327c165c86eadf51041ed3f 625.87 KB
b6c6df3d320d931038c9ee8b12e87d5d 0add153dc25314956016a74365fe9cca7cde0414 624.87 KB
bb2fcfa2415d0f08653157d8e998d342 76cb0def3ee130f4bddb6893acbcd6a7284f336b 390.37 KB
090fa5f64cfb050b8ffaec7f57c31834 dfec781877aa86afa941d512c3fc9e95c2b2bdea 314.8 KB
31afabdb5e9560e014b14ea8ec1f3635 b1b5f6f617e32de6132947a9cee969d831ab5abc 282.8 KB
9afc3b5e0831c4ead6574ef564f29cbd ba4154373b19e6563bc37c53dfd50caa3af79ffd 266.3 KB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 35.91%
Windows 7 Ultimate 22.73%
Windows 7 Home Premium 18.64%
Windows 8 Pro 6.36%
Windows 7 Professional 5.45%
Windows Vista Home Premium 3.64%
Windows 8 2.73%
Windows XP Professional 1.36%
Windows 7 Home Basic 1.36%
Windows 8 Enterprise N 0.91%
Windows 8 Release Preview 0.45%
Windows 8 Pro with Media Center 0.45%

Distribution by countryDistribution by country

United States installs about 16.00% of µTorrent.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 28.57%
Hewlett-Packard 21.43%
Acer 7.14%
Lenovo 5.71%
American Megatrends 5.71%
ASUS 5.71%
Toshiba 5.71%
Compaq 2.86%
MSI 2.86%
Alienware 1.43%
Samsung 1.43%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE