Please. There’s nothing inherently wrong with P2P/torrenting. Don’t spread FUD.
The Sality detection is false positive, it’s by Invincea which seems to have a problem with this, there’s more of these with Invincea. Also the VirusTotal Invincea update in the analysis seem to be 2 weeks old. Also the uTorrent.exe is digitally signed so it’s not infected.
Just to be sure I scanned my comp with 4 different on-demand malware/rootkit scanners, nothing came up.
The user comments in that article does not paint a pretty picture. 
Also, from the article: “Once it identifies something really fishy, it stops the action and reports the behavior to you, before any damage can be done.”
Which finally brings us back to the real issue in this topic:
I gather that the IDP refers to the Behavior Shield. I’ve set the “Please define how you would like to deal with suspicious program behavior” to “always ask”.
- So why was uTorrent.exe silently quarantined?
- Is it normal that a file that was quarantined is left in the file system as empty/0 bytes?
The reason I chose to try out the new Behavior Shield is that it offered an “always ask” setting. But it doesn’t work. So at least 50% of the shield settings do not work, dunno about the exclusions whether those work or not.
Also ran Avast explorer scan on the restored file and it doesn’t find anything wrong with the file. While at the same time, scanning in the Virus Chest always produces the IDP.Generic result. Same file but different results. What’s with that?
