{"id":3044,"date":"2014-11-19T19:46:22","date_gmt":"2014-11-19T19:46:22","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=3044"},"modified":"2018-05-29T12:01:50","modified_gmt":"2018-05-29T12:01:50","slug":"remove-tornplustv-tornplustv_version1-11","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/remove-tornplustv-tornplustv_version1-11\/","title":{"rendered":"Remove TornPlusTV Adware – TornPlusTV_version1.11 Removal Guide"},"content":{"rendered":"

Hi there. Today I wanted to talk about an adware<\/strong> named \u00a0TornPlusTV<\/strong> or\u00a0TornPlusTV_version1.11<\/strong> and thought I should give you some removal instructions<\/strong>. TornPlusTV_version1.11 appears to be a variant of CrossRider<\/strong> that I’ve blogged about before.<\/p>\n

If TornPlusTV is installed on your system, you will find new the TornPlusTV add-ons installed in Firefox and Internet Explorer, TornPlusTV_version1.11-bg.exe<\/strong> running in the Windows Task Manager and many new scheduled tasks installed. The Chrome browser seems to stay unaffected. I’ll show how to remove TornPlusTV_version1.11 in this blog post with the FreeFixer removal tool<\/a>.<\/p>\n

Here’s the TornPlusTV add-on in Internet Explorer:\"TornPlusTV<\/a><\/p>\n

And the TornPlusTV_version1.11 add-on in Firefox:\"TornPlusTV_version1.11<\/a><\/p>\n

You might also spot the TornPlusTV_version1.11-bg.exe<\/strong> in the Task Manager:\"TornPlusTV_version1.11-bg.exe<\/a><\/p>\n

When I mess around with some new software I always upload it to VirusTotal<\/a> to verify if the anti-malware progams there find something. Of the 55 scanners, 15 detected the file. The TornPlusTV_version1.11 files are detected as DLOADER.Trojan<\/strong> by DrWeb, W32\/A-ee826839!Eldorado<\/strong> by F-Prot, Gen:Application.Heur.Ky9@ky9OVaii<\/strong> by F-Secure and Crossrider (fs)<\/strong> by VIPRE.\"TornPlusTV<\/a><\/p>\n

The files are digitally signed by Arod Group (BrightCircle Investments Limited)<\/strong>: The certificated is quite new, it’s valid from the 17th of November 2014.\"Arod<\/a><\/p>\n

I’m sure you’d like to remove TornPlusTV_version1.11<\/strong>, and that’s pretty easy with FreeFixer<\/a>. Select the TornPlusTV_version1.11 items, as shown in the screenshots below, click Fix, and reboot your machine and the problem should be gone.<\/p>\n

The TornTVPlus process:\"TornTVPlus<\/a><\/p>\n

And the DLL loaded into Internet Explorer:\"TornPlusTV<\/a><\/p>\n

The scheduled tasks for TornPlusTV:\"TornPlusTV<\/a><\/p>\n

And last, the add-ons in Internet Explorer and Firefox:\"TornPlusTV<\/a> \"TornPlusTV<\/a><\/p>\n

Hope this helped you solved the TornPlusTV_version1.11 problem.<\/p>\n

Do you also have TornPlusTV_version1.11 on your machine? Any idea how it installed? Please share your story the comments below. Thank you!<\/p>\n

Thanks for reading!<\/p>\n

Update 2014-11-26<\/strong>: Now the files are signed by Aussie Labs\u00a0(BrightCircle Investments Limited):<\/strong><\/p>\n

\"Aussie<\/a><\/p>\n

 <\/p>\n

Update 2014-12-04<\/strong>: Now the files are signed by “BadFinger Project (BrightCircle Investments Limited)”.<\/p>\n

Update 2014-12-19: Files now signed by\u00a0Armageddon Labs (BrightCircle Investments Limited).<\/strong><\/p>\n

Update 2015-01-15: The files are now digitally signed by\u00a0Berta Dress Apps (Bright Circle Investments Ltd)<\/strong>.<\/p>\n

Update 2015-01-20: Now they are signed by\u00a0Selecao Technologies (Bright Circle Investments Ltd).<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"

Hi there. Today I wanted to talk about an adware named \u00a0TornPlusTV or\u00a0TornPlusTV_version1.11 and thought I should give you some removal instructions. TornPlusTV_version1.11 appears to be a variant of CrossRider that I’ve blogged about before. If TornPlusTV is installed on your system, you will find new the TornPlusTV add-ons installed in Firefox and Internet Explorer, … Continue reading Remove TornPlusTV Adware – TornPlusTV_version1.11 Removal Guide<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[3,16],"tags":[349,237,248,303,361,366,208,207,365],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/3044"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=3044"}],"version-history":[{"count":10,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/3044\/revisions"}],"predecessor-version":[{"id":3995,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/3044\/revisions\/3995"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=3044"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=3044"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=3044"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}