Should I block it?

98%

Yes, 98% block recommendation.

Possible reasons:

Multiple malware detections

Performance resource utilization

Additional versions

3.4.2.31927	0.51%
3.4.2.31893	1.02%
3.4.2.31743	0.51%
3.4.2.31633	0.51%
3.4.2.31633	1.02%
3.4.2.31522	0.51%
3.4.2.31515	0.51%
3.4.1.31395	4.06%
3.4.1.31395	1.52%
3.4.1.31139	0.51%
3.4.1.30888	0.51%
3.4.0.30224	0.51%
3.4.0.29535	0.51%
3.4.0.28937	0.51%
3.3.2.30488	0.51%
3.3.2.30486	0.51%
3.3.2.30416	2.03%
3.3.2.30303	4.06%
3.3.2.30303	0.51%
3.3.2.30260	0.51%
3.3.2.30260	0.51%
3.3.2.30260	0.51%
3.3.2.30260	0.51%
3.3.2.30260	1.02%
3.3.2.30180	2.03%
View more
3.3.2.30180	2.03%
3.3.2.30180	0.51%
3.3.2.30180	1.02%
3.3.2.30180	0.51%
3.3.2.30131	0.51%
3.3.2.30092	0.51%
3.3.2.30067	0.51%
3.3.2.29976	0.51%
3.3.2.29786	0.51%
3.3.1.30017	1.02%
3.3.1.30017	4.06%
3.3.1.30017	2.03%
3.3.1.30017	0.51%
3.3.1.30017	0.51%
3.3.1.30003	0.51%
3.3.1.29938	0.51%
3.3.1.29812	0.51%
3.3.1.29812	0.51%
3.3.1.29812	0.51%
3.3.1.29812	0.51%
3.3.1.29756	0.51%
3.3.0.29677	5.08%
3.3.0.29677	0.51%
3.3.0.29625	29.95%
3.3.0.29625	3.05%
3.3.0.29544	0.51%
13 other versions

Relationships

Parent process

explorer.exe (Windows Explorer by Microsoft Corporation)

Related files

uTorrent.exe

µTorrent by BitTorrent Inc (Signed)

Remove uTorrent.exe

Version:	3.3.0.29625
MD5:	746886d62f5912c366a25b01d3a971f0
SHA1:	a86dcff051135d0371283d128542ee7f1f11e733
SHA256:	c5673e32fb05eec8070782c38b56c94bfe4825a5b6ad5595e60cd62f5f0dd93a

Warning 3 antivirus scanners has detected malware.

Overview

utorrent.exe is malware that executes as a process with the local user's privileges usually within the context of Windows Explorer. It is set to be run when the PC boots and the user logs into Windows (added to the Run registry key for the current user). It has been configured with a firewall exception which allows both inbound and outbound network communication without being blocked. It is installed with a couple of know programs including µTorrent published by BitTorrent Inc., µTorrent from BitTorrent Inc. and µTorrent by BitTorrent Inc..

Details

File name:	utorrent.exe
Publisher:	BitTorrent Inc.
Product name:	µTorrent
Typical file path:	C:\Program Files\utorrent\utorrent.exe
File version:	3.3.0.29625
Size:	1020.08 KB (1,044,560 bytes)
Build date:	5/1/2013 12:51 AM
Certificate
Issued to:	BitTorrent Inc
Authority (CA):	VeriSign
Effective date:	Monday, June 21, 2010
Expiration date:	Saturday, July 27, 2013
Digital DNA
PE subsystem:	Windows GUI
File packed:	Yes
Code language:	Microsoft Visual C++
.NET CLR:	No

More details

Programs

The following programs will install this file

ShowBiz

ArcSoft

4% remove

µTorrent

BitTorrent Inc.

8% remove

µTorrent is a is a free, ad-supported, lighter-weight BitTorrent client designed to consume less resources then the full BitTorrent version. Some uTorrent installs include potentially unwanted programs in the form of the Conduit Engine, which installs a toolbar, and makes homepage and default search engine changes to a user's web browser.

MathType 6

Design Science, Inc.

4% remove

“MathType is a powerful interactive equation editor for Windows and Macintosh that lets you create mathematical notation for word processing, web pages, desktop publishing, presentations, elearning, and for TeX, LaTeX, and MathML documents. Enter equations as easily as you would write math with paper and pencil! This feature uses the built-in handwriting recognition in Windows 7 and later. Create equations quickly by choosing templates f...”

Disney Infinity PC

Disney Interactive Studios

5% remove

“Play Disney Infinity on your PC! You have the freedom to explore, take adventures, and create your own worlds with your favorite Disney and Disney/Pixar characters. Visit Toy Box Share to download and play amazing Toy Boxes created by the Disney Infinity community.”

Behaviors

Windows firewall allowed programs

Exceptions allow programs to access to the Internet through an outbound connections

Firewall exception for 'C:\Documents and Settings\user\Application Data\uTorrent\uTorrent.exe'
Firewall exception for 'C:\Documents and Settings\user\Application Data\uTorrent\uTorrent.exe'
Firewall exception for 'C:\Documents and Settings\user\Application Data\uTorrent\uTorrent.exe'
Firewall exception for 'C:\Documents and Settings\user\Application Data\uTorrent\uTorrent.exe'
Firewall exception for 'C:\Program Files\uTorrent\uTorrent.exe'
Firewall exception for 'C:\Program\uTorrent\uTorrent.exe'
Firewall exception for 'C:\Documents and Settings\user\Application Data\uTorrent\uTorrent.exe'
Firewall exception for 'C:\Documents and Settings\user\Application Data\uTorrent\uTorrent.exe'
Firewall exception for 'C:\Documents and Settings\user\Application Data\uTorrent\uTorrent.exe'
Firewall exception for 'C:\Program Files\uTorrent\uTorrent.exe'
Firewall exception for 'C:\Documents and Settings\user\Application Data\uTorrent\uTorrent.exe'
Firewall exception for 'C:\Documents and Settings\user\Application Data\uTorrent\uTorrent.exe'
Firewall exception for 'C:\Program Files\uTorrent\uTorrent.exe'

Startup files (user) run

Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'uTorrent' → "C:\Program Files\uTorrent\uTorrent.exe" /MINIMIZED

Network connections

Access through an approved Windows firewall exception

[TCP] ec2-50-16-139-100.compute-1.amazonaws.com (50.16.139.100:9053)

[UDP] listens on port 53695

[UDP] listens on port 57843

[UDP] listens on port 64189

Malware detections

Based on 40+ industry antivirus scanners, 3 of them detected the following malware.

Antivirus engine	Engine version	Detection
Bkav Security	1.3.0.4246	HW32.CDB.99db
Fortinet	5.1.147.0	Adware/Bunndle
Trend Micro HouseCall	9.700.0.1001	TROJ_GEN.R0C9H0AHU13

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00865289%	0.028634%
Kernel CPU:	0.00112994%	0.013761%
User CPU:	0.00752294%	0.014873%
Kernel CPU time:	391,669 ms/min	100,923,805ms/min
CPU cycles:	16,359,410/sec	17,470,203/sec
Context switches:	164/sec	284/sec
Memory
Private memory:	27.22 MB	21.59 MB
Private (maximum):	47.82 MB
Private (minimum):	23.65 MB
Non-paged memory:	27.22 MB	21.59 MB
Virtual memory:	305.51 MB	140.96 MB
Virtual memory (peak):	346.6 MB	169.69 MB
Working set:	38.76 MB	18.61 MB
Working set (peak):	49.3 MB	37.95 MB
Page faults:	2,139,741/min	2,039/min
I/O
I/O read transfer:	4.75 MB/sec	1.02 MB/min
I/O read operations:	70/sec	343/min
I/O write transfer:	260.57 KB/sec	274.99 KB/min
I/O write operations:	2/sec	227/min
I/O other transfer:	16.84 KB/sec	448.09 KB/min
I/O other operations:	1,755/sec	1,671/min
Resource allocations
Threads:	45	12
Handles:	778	600
GUI GDI count:	344	103
GUI GDI peak:	379	142
GUI USER count:	152	49
GUI USER peak:	188	71

Process properties

Integrety level:	Medium
Platform:	64-bit
Command line:	"C:\users\user\appdata\roaming\utorrent\utorrent.exe" /minimized
Owner:	User
Parent process:	explorer.exe (Windows Explorer by Microsoft Corporation)

Threads