What is TorrentLocker?

The TorrentLocker virus is dangerous ransomware, a form of malware and a computer encryption virus similar to CryptoLocker that potentially takes control of a computer system or other devices, restricts access to the operating system, and encrypts personal documents and files on the computer system or other device.

Newer versions of TorrentLocker ransomware have been updated to make it difficult to spot flaws with the encryption system. This means that it may be very difficult and nearly impossible to retrieve back encrypted files using reputable defensive crypto-software.

The TorrentLocker virus takes control of a computer system and displays a message that says something similar to “WARNING – We have encrypted your files with CryptoLocker virus – Your important files (including those on the network disk(s), USB, etc): photos, videos, documents etc. were encrypted with CryptoLocker virus The only way to get your files back is to buy our decryption software.”

The rest of the message displayed by the TorrentLocker ransomware page or window states that “Remoiging of CryptoLocker will not restore acccess to your encrypted files. The only way to save your files it to buy a decryption software. Otherwise, your files will be lost.”

This message is designed to get users to purchase a unique key or software in order to decrypt and restore personal files. Some versions of the virus may threaten this as a fine directed from a legitimate establishment like the FBI virus.

• Here is a complete list of files that can be encrypted by Torrent Locker ransomware:

.odt, .ods, .odp, .odm, .odc, .odb, .doc, .docx, .docm, .wps, .xls, .xlsx, .xlsm, .xlsb, .xlk, .ppt, .pptx, .pptm, .mdb, .accdb, .pst, .dwg, .dxf, .dxg, .wpd, .rtf, .wb2, .mdf, .dbf, .psd, .pdd, .pdf, .eps, .ai, .indd, .cdr, .dng, .3fr, .arw, .srf, .sr2, .mp3, .bay, .crw, .cr2,.dcr, .kdc, .erf, .mef, .mrw, .nef, .nrw, .orf, .raf, .raw, .rwl, .rw2, .r3d, .ptx, .pef, .srw, .x3f, .lnk, .der, .cer, .crt, .pem, .pfx,.p12, .p7b, .p7c, .jpg, .png, .jfif, .jpeg, .gif, .bmp, .exif, .txt

How does TorrentLocker get onto a computer?

Most security analysts claim that the TorrentLocker virus spreads utilizing common distribution methods, such as malicious spam email messages, malicious advertisements, malicious downloads, and more. This infection can also spread via social media content, including Facebook messages and posts.

1. TorrentLocker removal Software and Tools

1. We highly recommend writing down the toll free number below in case you run into any issues or problems while following the instructions. Our techs will kindly assist you with any problems.

2. Install the free or paid version of Malwarebytes Anti-Malware.

3. Once Malwarebytes is installed, run the program. *Malwarebytes may automatically begin to update and scan your computer at this point.

4. Once the Malwarebytes program has been open, if a scan has not initiated, please click the large Scan Now button or visit the “Scan” tab to initiate a scan. Before the scan is started Malwarebytes may ask to update the software, make sure to do so if prompted to.

5. Once the scan is complete, click the Quarantine All button to remove the files.

6. You may also chose to visit the History tab and click Delete All to remove these files from the Quarantine log, although these files no longer prove a threat.

2. System Restore/Reset

A System Restore/Reset is an easy solution to restore an infected computer to a date and time before it became infected with the TorrentLocker computer virus. To learn more please select a link below:

• Windows System Restore Instructions

• Windows 8 Refresh/Reset Instructions

TorrentLocker virus removal tips:

If the TorrentLocker virus is difficult to remove there are several steps you can use to troubleshoot the removal process:

User accounts

Ransomware often infects 1 user account on Windows systems at a time. Here are some tips to remove ransomware by using different user accounts.

• Log into an account not affected by malware (with administrative rights) and perform a scan with reputable software to detect and remove malware.

• You can also delete the infected account.

• Other options include creating a new user account to remove malware if only 1 Window’s user account is present on the computer system.

Denying flash

Some variants of ransomware use flash and symptoms of the infection can be halted by denying flash via Macromedia’s real-time options. To learn more and deny flash please visit: http://www.macromedia.com/support/documentation/en/flashplayer/help/help09.html

Troubleshoot internet/network issues

Safe Mode With Networking can be used to access the Internet for updates, drivers, removal software, or other files if internet and network connectivity is compromised.