Jump to content

uTorrent update installer detected as PUP.Optional.OpenCandy


Recommended Posts

PUP.Optional.OpenCandy, C:\Users\Exile\AppData\Roaming\uTorrent\updates\3.4.0_30620.exe, , [c7a3e5829ce0c47254c156958f7538c8],
VT scan results:

VT analysis 1419569540

MBAM isn't the only product detecting this old uTorrent installer as OpenCandy, however it's only hit by a total of 4 including Malwarebytes and given the age of the update, I suspect an FP, especially since I've got several other uTorrent patch installers which have been downloaded since which scan clean by Malwarebytes. So either this is an FP, or MBAM might need to add detection for the other patch installers assuming uTorrent was and still is bundling OpenCandy with their patches (although even though I did indeed install this patch at some point, no other traces of OpenCandy have been found on my system).


Link to post
Share on other sites

Ah, cool, thanks :)

I guess you guys just recently modded the defs for this which would explain why it was only now detected even though that file's been on my system for quite sometime (I haven't even used/launched uTorrent in ages).

Did you want one or more of the other installers that weren't detected to see if they have it bundled as well? If they do, then you'd be able to catch some variants being missed.

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.