Malwarebytes blocking a website

[WW3hasstarted]

hi can any one help me please

malwarebytes keeps popping up a window in bottom right of my pc every few seconds and its really annoying

it says website blocked due to malware

ip address 213.152.162.165
port 49798
inbound
c\users\mypcname\appdata\roaming\bittorrent\bittorrent.exe

i clicked manage exclusions to try allow that in the hope the bloody pop ups would stop, i searched hidden in win10 to find way to show appdata etc, i added that ip address to exclusions yet the extremely annoying malwarebytes pop ups will not stop !  

HELP !!

[ihasdivui]

You should put bittorrent.exe into the exceptions of the firewall.
It's not blocking a website, but your client's connections.

Also for the love of god please use a non-ad-infested client thanks

[BigNoise]

^ the client sholdn't be in that folder ...\appdata\roaming\ to begin with

it could be malware disguising as torrent client.
(you'll know when it autostarts with windows)

scan you PC asap.
upload the bittorrent.exe here:
https://www.hybrid-analysis.com/

and post the resulting link back here, ok

[WW3hasstarted]

problem has gone away for now, i cant remember when it stopped maybe after i restarted pc later that day
will let you know if problem comes back
thanks everyone for help
i like bittorrent client ads dont bother me plus i have ad blockers

[Infowars]

^ the client sholdn't be in that folder ...\appdata\roaming\ to begin with

it could be malware disguising as torrent client.
(you'll know when it autostarts with windows)

scan you PC asap.
upload the bittorrent.exe here:
https://www.hybrid-analysis.com/

and post the resulting link back here, ok

Thank you for posting that.  Torrent metadata download won't start.  I appear to be infected.  The client is in the folder you indicated above.  Here is the resulting link of my scan:
https://www.hybrid-analysis.com/sample/c...e6dee37976
What do you recommend?  Thanks much.

Spud17 edited Aug 29, 2018 01:48 am this post because: URL's aren't allowed as usernames, yours has been changed to just infowars.