On trying to update PortableApps.com_Platform from installed VERSION 30.0.4 Microsoft Defender Antivirus detects
PUATorrent:Win32/QBitTorrent,
see at https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-descri....
Both setup executables
* PortableApps.com_Platform_Setup_30.1.paf.exe
* PortableApps.com_Platform_Setup_30.1_UpdateFrom_30.0.2_OrLater_ONLY.paf.exe
are blocked on Download, so Installation / Upgrade is not possible.
Is this a false positive?
Or is PortableApps.com_Platform really infected/equipped with QBitTorrent feature?
Visit the Community page
Join our forums
Subscribe to our email newsletter
Subscribe with RSS
Follow us on BlueSky
Follow us on Facebook
Follow us on LinkedIn
Follow us on Mastodon
Looks like this may have been a short term false positive. I'm not seeing it now.
Sometimes, the impossible can become possible, if you're awesome!
OK, i will give it some more tries
I'm experiencing the same with Microsoft Defender blocking the download attempted by the updater as well as a direct download of the latest version, per the recommendation in https://portableapps.com/supprt/platform#manualupdate. Download detected as being/containing QBitTorrent.
Initial attempt to download was around 8:20 AM GMT-4, 9/29/2025. Attempted multiple times at various times in various manors (different browsers, attempting (and failing) to tell MS Defender the file is fine and to just continue, etc.) up until around 9:30 AM. All downloads blocked.
System: Windows 11 Enterprise v24H2 (build 26100.4946)
Attempted manual downloads via latest version of Microsoft Edge and Google Chrome.
Reading through the comments, the false detection is possibly due to the Enterprise OS Version:
Mine is also Windows 11 Enterprise v24H2 (build 26100.4946)
where some antivirus settings are controlled by the Domain and out of my reach.
The Security intelligence version is 1.437.214.0 and virus definitions updated @ 30.09.2025
I've reported the issue to Microsoft with both files for Enterprise users
Sometimes, the impossible can become possible, if you're awesome!
Great, thanks
Please try it again now. Microsoft confirmed there are no issues with either file.
Sometimes, the impossible can become possible, if you're awesome!
I am still facing the same issue, my Defender security intelligence version is 1.441.39.0 which was updated on 07/11/2025 08:51. Please advise
Not able to update as the installer is detected as a 'potentially unwanted app' and removed.
same here - none of the downloads working - even cannot compare the hash..
It shows as clean in VirusTotal in everything including Defender: https://www.virustotal.com/gui/file/452d481bfa25a46bb1e5eb8f63a4c6557d6d...
I just updated from 30.0.4 to 30.1 without issue on a fully up to date install of Windows 11 with Security intelligence version 1.437.212.0 and virus definitions updated to 9/9/2025 8:12AM. Scanning with this version of Windows Security shows no issues with the 30.1 installer or the update package.
Please update your definitions to the latest version.
Sometimes, the impossible can become possible, if you're awesome!
I have definitions 1.441.137.0 uploaded early 11/11/25, updated 11/11/25 on my computer, still considers the platform 3.1.2 as a potentially unwanted program. Can't download anything new from website either for the same reason. Could it be on a blacklist?
Thanks John, your report to Microsoft has fixed the false detection,
Now i could install the update smoothly, no more blocking due to flse positives.
Thanks
To late for me. I had the PortableApps platform on my work-pc. When the update appeared, I downloaded it (didn't want to install). But the false virusdetection was already automaticaly reported to the helpdesk and they ordered that I had to delete all things related to portableapps. I already said that it probably was a false detection, but alas, they didn't know portableapps and probably didn't want to know it either.
The same situation as before:
Probably can be fixed only with once again reporting this issue to Microsoft for Enterprise users
Windows 11 Enterprise, 25H2
(Fake) Detected: PUATorrent:Win32/QBitTorrent
Affected items: PortableApps.com_Platform_Setup_3.1.2_UpdateFrom_3.0.2_OrLater_ONLY.paf.exe
--
Ron Miller
I've submitted it through Microsoft's kinda-broken false positive reporting.
Sometimes, the impossible can become possible, if you're awesome!
The update file has cleared and should no longer be detected. The main installer is "in progress". It takes MS about 3 business days to review false positives.
Sometimes, the impossible can become possible, if you're awesome!
John,
It appears that all future platform updates with any reference to "QBitTorrent" will also be quarantined. That means you will need to report them all as false positives as soon as published.
Would you please prioritize the "Reconsider mandatory upgrades of platform before apps" from "Possible Future Features (Suggested by Users, Under Consideration)" section?
This will at least allow other security related updates to the apps while resolving the platform update issue.
Failing that can you move it to "Known / Confirmed Issues" as this also applies anytime the platform update fails not just when quarantined.
Thanks, Jestre
Movie Wisdom: Don't kick the monster!
Build mechanized armored assault suit to annihilate it, program robots to smash it, Shoot, Spear or even Throw something at it (preferably a grenade), but NEVER kick the monster!
NOTE: Doesn't apply to Black Belts
Please try this text fix of the update file.
1. Download this update file somewhere you'll remember.
2. Start the PA.c Platform and cancel when it asks you to update.
3. Click Apps then Install a New App [paf.exe] and select the file above.
Download Size: 3MB
SHA256: e42ae412e76dd0e3ed28d1adfca6c23e7ab1d28dcd087c7019c808e72915221d
See if that works for you and please report back.
If you're one of the folks where the Install a New App option crashes, run the update text fix directly and then select the folder containing your existing PA.c Platform's base, aka where Start.exe is.
Sometimes, the impossible can become possible, if you're awesome!
Hi John,
thanks for providing a fix.
OK,
And it is working. GREAT, thanks for the fix. MS Defender does no longer consider this PAF.EXE to be malicious
At restart of PortableApps the remaining updates are also running flawlessly
Great thanks from my side
I've implemented this fix for users updating from recent versions. I'll be putting together a platform update to handle both new users and users updating from older platform versions today to work around the MS Defender Enterprise bugs.
Sometimes, the impossible can become possible, if you're awesome!
Hi,
I applied your fix of my work computer and the update was successful.
Thanks.
The issue with MS Defender Enterprise improperly detecting a Potentially Unwanted App (PUA) of QBittorrent in the platform full installer and update installer should be fixed in today's PA.c Platform 30.1.3 release.
Sometimes, the impossible can become possible, if you're awesome!
Latest PA.c Platform 30.1.3 release is working flawlessly in Enterprise environment.
Great, thanks
My PA installation found the 30.1.3 update and tried to download it, but went straight to an error saying it could not download it. Tried twice. Then I typed the URL of the failed download displayed in the error message pop-up into my web browser and it downloaded fine through my browser. I ran that and successfully updated my PA installation.
In the Error message pop-up, the URL started with HTTP, not HTTPS... but I did not specify either one when I typed it into my browser, so not sure if that was the issue or not.
Just tested, and both HTTP and HTTPS work on the download URL, so that's not the issue...
--
Ron Miller
It would appear that Microsoft determines all torrent software (whether it contains a virus or not) as potentially unwanted applications. See https://learn.microsoft.com/en-us/unified-secops/criteria
"Our PUA protection aims to safeguard user productivity and ensure enjoyable Windows experiences. This protection helps deliver more productive, performant, and delightful Windows experiences.
PUAs aren't considered malware.
Microsoft uses specific categories and the category definitions to classify software as a PUA.
Torrent software (Enterprise only): Software that is used to create or download torrents or other files specifically used with peer-to-peer file-sharing technologies."