This forum thread needs a solution.
Kudos0

utweb_installer.exe

How come Norton 360 keeps quarantining this file

I want to install uTorrent but I cant

Any help would be greatly appreciated

Norton 360 Version: 22.22.1.58

Windows 10 Pro version 21H1

Replies

Kudos1 Stats

Re: utweb_installer.exe

Report a suspected incorrect detection to NortonLifeLock
https://support.norton.com/sp/en/us/home/current/solutions/v126152382

Submit a file to NortonLifeLock
https://support.norton.com/sp/en/us/home/current/solutions/kb20090602171902EN

Respond to incorrect Norton alerts that a file is infected or a program or website is suspicious
https://support.norton.com/sp/en/us/home/current/solutions/kb20100222230832EN


Please tell us what Norton is telling you regarding this event.
For information regarding event > from Norton pop-up > View Details > Copy to Clipboard &or from Norton history > More Options > Copy to Clipboard > paste.

For second opinion choose File &/or Search hash at VirusTotal 


Act on quarantined risks or threats
https://support.norton.com/sp/en/us/home/current/solutions/v6200305

Turn off or turn on Download Intelligence
https://support.norton.com/sp/en/us/norton-security/current/solutions/v23920640

Exclude files and folders from Norton Auto-Protect, SONAR, and Download Intelligence scans
https://support.norton.com/sp/en/us/home/current/solutions/v3672136

Fix problem detecting a file or program as a threat even after you exclude it from scan
https://support.norton.com/sp/en/us/home/current/solutions/v115455517

Configure Exclusions/Low Risks settings
https://support.norton.com/sp/en/us/norton-360/home/solutions/v15457075

Exclude files with low-risk signatures from Norton scans
https://support.norton.com/sp/en/us/home/current/solutions/v15463085

Kudos1 Stats

Re: utweb_installer.exe

FWIW ~ as test 

https://www.utorrent.com/web/
Free Web Torrent App


Filename: f_000303
Threat name: PUA.SuperflussFull Path: C:\bjm\Edge\user\current\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000303

On computers as of 
2/22/2022 at 10:59:17 AM

Last Used 
2/22/2022 at 11:04:56 AM

Threat type: Security Risk. Programs that pose a security or privacy risk and are not already classified as malicious.

f_000303 Threat name: PUA.Superfluss

Many Users
Hundreds of thousands of users in the Norton Community have used this file.

Mature
This file was released 2 months ago.

Low
This file risk is low.

Source: External Media

Source File:
f_000303

File Actions

Infected file: C:\bjm\Edge\user\current\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\ f_000303 No fix attempted

File Thumbprint - SHA:
d4e60be1204df950e20b1968e14458e3a9ccf40a7fe7b0a6d2c2b4e01d646fc6
File Thumbprint - MD5:
0a6a273312eabf4d971fb55b52b781ae



Filename: Unconfirmed 445369.crdownload
Full Path: c:\bjm\Edge\user\current\Desktop\Unconfirmed 445369.crdownload

Developers 
BitTorrent, Inc.

Version 
1.2.7.4186

Identified 
2/22/2022 at 11:15:05 AM

Last Used 
2/22/2022 at 11:17:05 AM

Startup Item 
No

Many Users
Hundreds of thousands of users in the Norton Community have used this file.

Mature
This file was released 2 months ago.

Bad
There are many indications that this file is untrustworthy.

https: //download-new. utorrent. com/endpoint/utweb/track/stable/os/win
Downloaded File Unconfirmed 445369.crdownload from utorrent.com

Unconfirmed 445369.crdownload

File Thumbprint - SHA:
d4e60be1204df950e20b1968e14458e3a9ccf40a7fe7b0a6d2c2b4e01d646fc6
File Thumbprint - MD5:
0a6a273312eabf4d971fb55b52b781ae






What is a PUA (Potentially Unwanted Application) or PUP (Potentially Unwanted Program)?
https://us.norton.com/internetsecurity-malware-what-are-puas-potentially-unwanted-applications.html

Kudos0

Re: utweb_installer.exe

FWIW ~ as test  

https://www.utorrent.com/desktop/
µTorrent Classic
Free Torrent Client

Filename: uTorrent.exe
Full Path: c:\bjm\Edge\user\current\Desktop\uTorrent.exe

Developers 
Rainberry Inc

Version 
3.5.5.46120

Identified 
2/22/2022 at 11:12:43 AM

Many Users
Tens of thousands of users in the Norton Community have used this file.

Mature
This file was released 3 months ago.

Good
Norton has given this file a good rating.

https:  //download-hr.  utorrent.  com/track/stable/endpoint/utorrent/os/windows
Downloaded File uTorrent.exe from utorrent.com

uTorrent.exe

File Thumbprint - SHA:
4c7f671006c954103b076f46da7e2da23669da27a9e55b6ac268d071f8c90b86
File Thumbprint - MD5:
007857e1cd5e960fea0416b2ef54534d
 

Kudos0

Re: utweb_installer.exe

FWIW ~ as test 

https://www.utorrent.com/web/
Free Web Torrent App


File: utweb_installer.exe
File size: 20.4 MB (21,406,304 bytes)
MD5 checksum: 0A6A273312EABF4D971FB55B52B781AE
SHA256 checksum: D4E60BE1204DF950E20B1968E14458E3A9CCF40A7FE7B0A6D2C2B4E01D646FC6

Filename: f_0003e5
Full Path: c:\bjm\Edge\user\current\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0003e5

Developers 
BitTorrent, Inc.

Version 
1.2.7.4186

Identified 
2/22/2022 at 11:46:28 AM

Last Used 
2/22/2022 at 11:48:27 AM

Startup Item 
No

Many Users
Hundreds of thousands of users in the Norton Community have used this file.

Mature
This file was released 2 months ago.

Bad
There are many indications that this file is untrustworthy.

https:  //download-new.  utorrent.  com/endpoint/utweb/track/stable/os/win
Downloaded File f_0003e5 from utorrent.com

File Thumbprint - SHA:
d4e60be1204df950e20b1968e14458e3a9ccf40a7fe7b0a6d2c2b4e01d646fc6
File Thumbprint - MD5:
0a6a273312eabf4d971fb55b52b781ae


https://www.virustotal.com/gui/file/d4e60be1204df950e20b1968e14458e3a9ccf40a7fe7b0a6d2c2b4e01d646fc6

Kudos0

Re: utweb_installer.exe

BeckhamFan48:

How come Norton 360 keeps quarantining this file
I want to install uTorrent but I cant
Any help would be greatly appreciated

Have you tried "Trust Now"? 
Is this your "utweb_installer.exe"?
https://community.norton.com/en/comment/8523032#comment-8523032

Since, you provided no information.  I guessed...for my test.  
as always, your mileage may vary


Please tell us what Norton is telling you regarding this event.
For information regarding event > from Norton pop-up > View Details > Copy to Clipboard &or from Norton history > More Options > Copy to Clipboard > paste.

For second opinion choose File &/or Search hash at VirusTotal 

Kudos0

Re: utweb_installer.exe

FWIW ~ as test 

https://www.utorrent.com/web/
Free Web Torrent App


Next
Decline


Decline

Resolved Threats:
PUA.Superfluss
 Type: Anomaly
 Risk: Low (Low Stealth, Low Removal, Low Performance, Low Privacy)
 Categories: Security Risk
 Status: Excluded
 -----------
 1 Infected File
C:\bjm\user\current\AppData\Local\Temp\GenericSetup.exe_1645532097\Carrier.exe - Excluded
 1 Browser Cache

PUA.Superfluss
 Type: Anomaly
 Risk: Low (Low Stealth, Low Removal, Low Performance, Low Privacy)
 Categories: Security Risk
 Status: Excluded
 -----------
 1 Infected File
C:\bjm\user\current\AppData\Local\Temp\GenericSetup.exe_1645531876\Carrier.exe - Excluded
 1 Browser Cache

PUA.Superfluss
 Type: Anomaly
 Risk: Low (Low Stealth, Low Removal, Low Performance, Low Privacy)
 Categories: Security Risk
 Status: Excluded
 -----------
 1 Infected File
C:\bjm\user\current\AppData\Roaming\uTorrent Web\utweb.exe - Excluded
 1 Browser Cache



FWIW ~ as test 
as always, your mileage may vary

Kudos0

Re: utweb_installer.exe

FWIW ~ adding Trust Now step (from here)

Filename: f_0003e5
Full Path: c:\bjm\Edge\user\current\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0003e5

Developers 
BitTorrent, Inc.

Version 
1.2.7.4186

Identified 
2/22/2022 at 11:46:28 AM

Last Used 
2/22/2022 at 11:48:27 AM

Startup Item 
No

Many Users
Hundreds of thousands of users in the Norton Community have used this file.

Mature
This file was released 2 months ago.

User Trusted
You have indicated that this file is trusted.

https:  //download-new.  utorrent.  com/endpoint/utweb/track/stable/os/win
Downloaded File f_0003e5 from utorrent.com

File Thumbprint - SHA:
d4e60be1204df950e20b1968e14458e3a9ccf40a7fe7b0a6d2c2b4e01d646fc6
File Thumbprint - MD5:
0a6a273312eabf4d971fb55b52b781ae
 


Note: I am not suggesting/prompting "Trust Now" -
This is only my test -

Caveat: I do not run 

https://www.utorrent.com/web/ 
Free Web Torrent App

This is only my test - 

Kudos0

Re: utweb_installer.exe

Kudos0

Re: utweb_installer.exe

@BeckhamFan48

Why is uTorrent blocked
utorrent, the most popular torrent client is blocked.
I  unblock it. It tries to install 2 adware. Which I simply declined.
That is good.
But then, it tries to run carrier.exe 
I wonder if it's dangerous too?

https://forums.malwarebytes.com/topic/284261-why-is-utorrent-blocked/

Kudos0

Re: utweb_installer.exe

I am here because, after using Norton and uTorrent for years, I suddenly found it missing.  As a non-frequent user of uTorrent, I looked through the logs of Norton and found it uninstalled a month ago.  Risk  is low and so far, I haven't found anything wrong with uTorrent acting weirdly so maybe Norton is smarter than I am (or thinks that it has a right to block off any software it deems so).  I am reading similar stories with BitTorrent, etc.

Has the world collectively decided that that we do not need torrent anymore (or that you have to choose between torrent and antivirus)?

Kudos0

Re: utweb_installer.exe

Banana Chrysant...:
I am here because, after using Norton and uTorrent for years, I suddenly found it missing.  

Is this your uTorrent?

https://www.utorrent.com/web/
​​​​​​​Free Web Torrent App

https://community.norton.com/en/comment/8523032#comment-8523032


Please tell us what Norton is telling you regarding this event.
For information regarding event > from Norton pop-up > View Details > Copy to Clipboard &or from Norton history > More Options > Copy to Clipboard > paste.

For second opinion choose File &/or Search hash at VirusTotal

Kudos1 Stats

Re: utweb_installer.exe

Maybe you should try qBittorrent instead :-)

Obviously uTorrent is somewhat dubious and is bundled with crapware and PUM's and PUA's

Malwarebytes detects it as well:  

Kudos0

Re: utweb_installer.exe

Kudos0

Re: utweb_installer.exe

For me, I managed to undo the quarantined file, moving it back to the original folder and got the program running again.  Got it to do what it needed to do, then turned it off.

As of now, I believe utorrent exe file got quarantined again.  I guess I will repeat this whenever I need to use it again (which is not very often - which is why I did not notice it has been quarantined again either).

Kudos1 Stats

Re: utweb_installer.exe

Thanks alot Bjm_ that solved my problem as well. Norton became way too smart for itself. While I don't normally mind, when it interferes with my normal activities I disagree. Turning the Insight Notifications to Risks Only helps me download the torrents I need.

Kudos0

Re: utweb_installer.exe

DragonScooby:

Thanks alot Bjm_ that solved my problem as well. Norton became way too smart for itself. While I don't normally mind, when it interferes with my normal activities I disagree. Turning the Insight Notifications to Risks Only helps me download the torrents I need.

FWIW ~ my preference:
FWIW ~ 
https://forums.malwarebytes.com/topic/284261-why-is-utorrent-blocked/#comment-1504446

This thread is closed from further comment. Please visit the forum to start a new thread.