Possible ransomware detected
Hi there,
Today I received this warning about qbittorrent.exe
C:\Program Files\qBittorent\qbittorent.exe
The files affected are:
C:\Users\XXX\AppData\Roaming\qBittorent\qBittorent.ini
C:\Users\XXX\AppData\Roaming\qBittorent\qBittorent-data.ini
C:\Users\XXX\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
C:\Users\XXX\AppData\Local\Microsoft\Windows\Explorer\iconcache_32.db
C:\Users\XXX\AppData\Local\Microsoft\Windows\Explorer\iconcache_16.db
I would expect it to modify files in it's own directory but not in Windows. Can anyone shed any light please?
I also have Bitdefender, RogueKiller & Malwarebytes (premium) and neither have detected anything.
Thanks.


- Log in to post comments

Thanks. I might add that Bitdefender also flagged it with the same warning some months ago when I upgraded to the latest qBittorrent, and as a result I reverted back to the previous version which had always been fine.
Then qBittorrent started playing up so I uninstalled it and moved to the latest version. Then, this error (but with Acronis instead).
Still not totally comfortable ignoring the warning and proceeding.
- Log in to post comments

You can set a Protection Exclusion for qBittorrent in ATI 2021 if you are happy that it is safe to use. Most antivirus software will post warnings about any torrent type applications simply because it is a known vehicle for malware transmission when people download hacked copies of legitimate software etc.
- Log in to post comments