In recent developments, the widely-used BitTorrent client, uTorrent, has come under scrutiny once again from various anti-virus vendors, including Microsoft’s Windows Defender. This software is being flagged as ‘riskware,’ ‘malware,’ and ‘potentially unwanted software,’ leading to its removal from users’ systems without their consent. Notably, another popular torrent client, qBitTorrent, is experiencing similar challenges.
With millions of installations worldwide, uTorrent continues to be the preferred choice for a significant portion of the BitTorrent user base. Research conducted last year indicated that approximately two-thirds of users favor uTorrent over its competitors. Despite the introduction of a “Web” version in 2018, the standalone client remains the dominant choice, provided users can navigate the obstacles posed by anti-virus software.
uTorrent Malicious?
Over the past few years, uTorrent has frequently been categorized as ‘malicious’ software. This issue has resurfaced recently, with several anti-virus tools, including Windows Defender and Malwarebytes, designating the torrent client as dangerous. A scan of the latest installer using Virustotal revealed that uTorrent is flagged by 19 different companies, with classifications ranging from “riskware” to “Trojan.BtcMine” and “bundled installer.”
Microsoft specifically identifies uTorrent as a “Potentially Unwanted Application” (PUA), maintaining a dedicated page in its malware database that has labeled the software a severe threat for several years.
Potentially Unwanted Software
The term “potentially unwanted software” encompasses a variety of issues, from altering browser settings to installing third-party tools without user consent. While Microsoft clarifies that this classification does not equate to malware, the consequences for users can be significant. Reports have surfaced from individuals who found uTorrent removed from their systems, unable to reinstall it, with many seeking assistance on social media platforms.
qBitTorrent is Unwanted Too
Interestingly, uTorrent is not alone in facing these challenges. Recently, qBitTorrent was also added to Microsoft’s malware database. Although it is classified as a PUA rather than malware, Windows Defender actively blocks and removes this software as well. This has led to a flurry of complaints on platforms like Reddit and the qBitTorrent GitHub page, where users share their frustrations.
One user noted, “Windows Defender keeps silently removing the software despite being explicitly allowed on the machine.” Another user speculated whether there is a coordinated effort against torrent clients, a notion that seems plausible given the broader trend of flagging such applications.
All Torrent Clients Are Unwanted?
Microsoft’s background articles on unwanted software specifically mention torrent clients alongside advertising software and cryptominers. While the guidelines suggest that these classifications apply primarily to enterprise environments, complaints from individual users indicate that the issue extends beyond that scope.
Despite Microsoft’s assertion that unwanted software is distinct from malware, the lack of clarity in its malware encyclopedia raises questions. Windows Defender categorizes PUAs as a ‘severe threat,’ which complicates the user experience. A Virustotal scan of uTorrent revealed numerous red flags, while qBitTorrent appeared relatively clean, suggesting that the blocking may be more about the nature of the software rather than its actual safety.
While it is advisable not to disregard anti-virus warnings, there are methods to install uTorrent and qBitTorrent without encountering these issues. Users can disable PUA protection in Windows with a few simple clicks or opt for third-party anti-virus solutions that bypass Windows Defender altogether.
