uTorrent mining Bitcoins?

Several sites are reporting that the uTorrent client is mining Bitcoins.  We took a look at uTorrent and we looked for  EpicScale or other software that may mine for Bitcoins.  We also listened to our network with WireShark.  

Note: Downloading copyrighted information is illegal and your ISP may be forced to give information about you IP address and all logs to attorneys that may represent the copyrighted download.

During the installation there is an add-on that ask you to Accept or Decline.  I Accepted and during this installation, the software reset my homepage to Yahoo and added Searchprotection (later identified as a PUP software)

VMWare with Windows 10 preview.

1 uTorrent

2 uTorrent Permissions

3 Bittorrent Search Protection by Spigot


5 Bittorrent five knives

Removing the PUP with Adwcleaner


So are Bitcoins being mined?  Possibly from an add-in.  Reports say that it is more than likely an add-in that the enduser agreed to install.   We did not find any evidence of Bitcoin mining.   We did not find mining software using Wireshark and by searching files (shown and hidden).

So was it packaged as an add-in?     Some users reported that it was.  When you install software, always READ the installation and decline software you don’t want.

If you download any freeware, always run an anti-malware program such as Adwcleaner or Malwarebytes.   Remember, torrents can be used to transfer large files and do serve a purpose.


About TCAT Shelbyville IT Department

The Tennessee College of Applied Technology - is one of 46 institutions in the Tennessee Board of Regents System, the seventh largest system of higher education in the nation. This system comprises six universities, fourteen community colleges, and twenty-six Applied Technology Colleges.
This entry was posted in Technology and tagged , , , . Bookmark the permalink.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s