Skip to main content

Possible ransomware detected

Thread needs solution

Hi there,

Today I received this warning about qbittorrent.exe

C:\Program Files\qBittorent\qbittorent.exe

The files affected are:

C:\Users\XXX\AppData\Roaming\qBittorent\qBittorent.ini

C:\Users\XXX\AppData\Roaming\qBittorent\qBittorent-data.ini

C:\Users\XXX\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db

C:\Users\XXX\AppData\Local\Microsoft\Windows\Explorer\iconcache_32.db

C:\Users\XXX\AppData\Local\Microsoft\Windows\Explorer\iconcache_16.db

I would expect it to modify files in it's own directory but not in Windows. Can anyone shed any light please?

I also have Bitdefender, RogueKiller & Malwarebytes (premium) and neither have detected anything.

Thanks.

1 Users found this helpful

Nat, welcome to these public User Forums.

If you already have BitDefender etc installed, then you should not have the new ATI 2021 Cyber Protect feature active as well.  It should be either one or the other not both!

Thanks. I might add that Bitdefender also flagged it with the same warning some months ago when I upgraded to the latest qBittorrent, and as a result I reverted back to the previous version which had always been fine.

Then qBittorrent started playing up so I uninstalled it and moved to the latest version. Then, this error (but with Acronis instead).

Still not totally comfortable ignoring the warning and proceeding.

You can set a Protection Exclusion for qBittorrent in ATI 2021 if you are happy that it is safe to use.  Most antivirus software will post warnings about any torrent type applications simply because it is a known vehicle for malware transmission when people download hacked copies of legitimate software etc.