Torlock Malware - How to remove

Torlock is the name used by a few torrenting sites that enable users to share files which are often pirated. Torlock calls itself “The No Fakes Torrent Site”, claiming to offer reliable torrents. But, like most torrenting sites, Torlock has some security problems, including sharing links to infected files and showing malicious pop-up ads. Think carefully before using Torlock and protect your computer and your data beforehand.

Torlock sites can be found on torlock.com, torlock2.com, torlock.icu, torlock.cc, torlock.host, and other URLs. I’m going to refer to all of them as “Torlock”.

In short about Torlock:

Type of threat	Adware, malware.
Security problems	Infected torrents, malicious ads.
Dangers	Scam ads can cost money, phishing sites can steal personal information, malicious downloads can infect a computer.
Stop Torlock ads and malware	Be skeptical of ads on Torlock, use an ad-blocker, block Javascript on untrusted sites, block unwanted web push notifications, scan downloaded files (Spyhunter for PC, Combo Cleaner for Mac, etc.).

Torlock problems

Torlock is a site that’s collected a ton of torrent links and categorized them for users’ convenience. It’s used to share free and pirated files, movies, games, music, etc. But it could also infect people’s computers through dangerous ads and files.

Infected files

Most of the files shared on torrenting sites are honestly safe, but not all of them. Programs and archives are risky, whether torrented or downloaded from a shady website. They may install additional software and mess with your computer. If you’re new to torrenting, stay away from games and software.

Besides executables, just about any file can have malware: PDFs, Office files, even images can include malicious code. That’s why it’s important to scan every file you download. Use a good antivirus program and scan files after they’re done downloading and only open them if you think they’re clean. Do not trust the files on Torlock even if you’ve only ever had a good experience. You just never know. Even trusted uploaders sometimes turn to the dark side.

Currently, the main malware that’s hurting software pirates is Djvu ransomware. Victims have their files encrypted and renamed with a second extension, like Rooe, Bboo, Repp, Alka, etc. Djvu spreads in pirated software installs and cracks. If you don’t have a backup of your files and accidentally download from Torlock a file infected with Djvu, you pretty much lost all of your files.

Malicious ads

Torlock and other torrenting sites are often used to illegally share files, so some advertising companies don’t want to work with them. But advertising is needed to monetize the site. Torlock just needs to find someone willing to cooperate.

The result – Torlock working with unscrupulous, unethical advertising networks and showing low-quality, sometimes dangerous ads.

Ad-networks that work with Torlock include the usual suspects: PopCash, Popads, Propeller Ads, RevenueHits. These networks are infamous for their low-quality ads, including annoying clickbait, fake download buttons, fake virus warnings, malware links, even ransomware.

Clicking on even one link on Torlock.com opens multiple browser tabs with worthless sites that one has to sift through to get to the real link. Most of the links are pretty benign – VPNs, dubious security software, notification spammers, and those “Your Norton security may have expired” pages. Other ads, like 3 viruses, fake giveaways, and those fake articles telling you to buy new cryptocurrency, do really threaten your wallet – they trick people to reveal their payment information, which is then abused by scammers.

Some Torlock sites may offer you to allow notifications from the site, which will allow Torlock to spam your browser with pop-ups.

Notable are malicious ads that use exploit kits. These are sites that scan visitors for known security bugs and then infect them in the background. But this is only a problem for those who do not install new software updates.

I saw a lot of VPN ads on Torlock. Relatively harmless, but still deceptive. They try to scare you by showing you your IP and location, as if that’s secret info. VPN makers often try to scare people into believing that their connection isn’t private, even when it is. They also use words like “military-grade encryption” to talk about normal encryption that is already used by most of the world’s websites. All this is catching up with some VPN companies, but hey, possibly-illegal ads are just at home on a site like Torlock.

How to stay safe on Torlock

Pirating is pretty dangerous, so my first piece of advice is to not do it unless you have no other option.

Ads on Torlock are the worst thing about it. Malicious ads try to get you to reveal your payment information or to download and install something. The ads will say anything to convince you. Be very skeptical of each and every ad that appears while you’re browsing Torlock.

You can use an ad-blocker and it will help a little, but some of the mentioned ad-networks have solutions to deal with ad-blockers, so people still have to deal with pop-up ads and redirects.

You may want to disable notifications on Torlock (How to disable web push notifications) to stop unwanted pop-ups. To try and break the ads, you can also disable Javascript on untrusted sites by adding them to the “Block” list:

• Chrome – Settings, Privacy and security, Site settings, Javascript.
• New Edge – Settings, Site Permissions, Javascript.

Safari and Firefox don’t let you add exceptions to the Javascript block, but they have extensions for that purpose.

Also, scan every file that you download with a quality anti-malware program, like Spyhunter if you’re on Windows, Combo Cleaner for macOS, or another trusted program. Make sure to set your operating system to display the types (extensions) of the files that you download. Also, a key generator or a cracking tool downloaded from Torlock will trigger your antivirus whether or not it’s infected, so read the malware names.

Additionally, be prepared for an infection. Make backups of all of your important files regularly. Then, in case you get ransomware, your data will be safe.

Automatic Malware removal tools