Malware Being Blocked Because Of Bitorrent.exe

[erniemink]

I need to report something that BitTorrent may be doing that can be dangerous. Consistently during the running of BitTorrent, my anti-malware program Malwarebytes is popping up a message that says it is blocking a malicious malware website.  The Domain is listed as: IP: 89.28.122.78, Port 54076, Type: Inbound, Process: C:\Users\erniejm\AppData\Roaming\BitTorrent\BitTorrent.exe.

 

Since peer to peer software can be the cause of malware and virus problems, this program is doing it's job, and I need to know how to rectify this issue.

[Harold Feit]

Sounds like malwarebytes is being overparanoid actually.

Blocking simply based on IP address is not a good manner.

[mdmike52]

My Malware Bytes is also blocking multiple Inbound and (mostly) Outbound web addresses. It is very annoying but I am unsure weather to allow these websites. Can anyone explain exactly what Bit Torrent is trying to do here, calling up all these different web addresses??

The requests always comes from:  Users/myname/appdata/roaming/bittorrent/bittorrent.exe.

 

Are These dangerous ??

 

Mike

[Harold Feit]

Doubtful.

There's not enough information, except that they're employing a bluetack-style blocklist (which is known to be innacurate at best and user-hostile at worst) without actually looking at the traffic going over the connection.

Similar to ZoneAlarm claiming e-mail being sent simply because port 25 was being used.

[mdmike52]

OK.  I am going to do a Full Disk backup (clone) then start putting all the Bit Torrent blocked sites in the "allow" list and see what happens. What's the worst that could happen ?  (Famous Last Words !! )

 

Will get back to this thread in a week or so with results.

 

Mike