Torrent9.so – a deceptive torrent website that also pushes notifications of dubious content

Torrent9.so is a French website that offers various movies, TV shows, music, and other multimedia – it presents this content in the native language. The so-called “torrenting” practice is not illegal in itself, however, when copyrighted video, game, and other files are downloaded, it is very much against the law. Besides, the site also uses deceptive advertisements and redirects, which might consequently reroute users to more suspicious places and offer download potentially unwanted programs.
The website also offers users to subscribe to notifications. This built-in feature is commonly used by many websites, although shady sites such as Torrent9.so use push notifications (that come up at any time when the computer is turned on, interrupting work and being generally annoying) to promote scams, phishing links, and other malicious content.
| Name | Torrent9.so |
| Type | Torrent site, push notifications, redirects |
| Targeted country | France |
| Dangers |
|
| Site purpose | Make users subscribe to notifications and redirect to potentially dangerous websites that offer downloading insecure software |
| Ad elimination | If you subscribed to push notifications, you have to access web browser settings and prevent the site from showing you ads. If you downloaded something while navigating through the site, you should check your computer for malware with anti-virus software immediately. If you see ads even if you stop notifications, you might have adware on your system |
| Further steps | If a security scan found something malicious on your system, we highly recommend using FortectIntego to remediate the machine and fix virus damage that could have been sustained during the infection |
During our research and time on the site, we found that there are plenty of deceptive activities going on. Ads are one of the most common monetization methods around the web and definitely have their purposes. With the help of ads, users can enjoy online content for free and allows creators to live off their craft. However, things change as soon as untrustworthy ad networks are used.
Typically, insecure chains of ads are not deliberate, as threat actors constantly find new ways of injecting their malicious scripts without acquiring permissions. Having that said, some networks are not particularly concerned about reputation, as they can simply stay anonymous. Therefore, there are plenty of websites that can contain malicious JavaScript ads which, under certain circumstances, would execute malware automatically.[1]
In most cases, however, Torrent9.so redirects would bring users to sites that offer to subscribe to a VPN service (shady banner promotes a VPN in order to become anonymous while downloading illegal content – and this makes it somehow OK) or download a potentially unwanted program that would deliver ads. We were redirected to the WebSearchConverter download prompt page at some point – it is a well-known browser hijacker that brings no value to users.
Suspicious ads are not the only concern that could be related to it. There is no way to know if all the torrents hosted on the site are not malicious. Distribution of malware on third-party sites that host pirated installers is a common practice. For example, it is known that creators of Nobu, Weui, and other Djvu variants use software cracks and pirated program installers to infect users with ransomware – a devastating computer infection that locks all personal files and then demands a ransom for a tool that could return all the data.[2]

Therefore, it is best to avoid torrent sites (other known sites are 1337x.to, Limetorrent.info, Thepiratebay.org, etc.) altogether, and rather find free alternatives to programs. For movies and TV series, you can use legitimate services such as Netflix. In other words, there are many options available, rather than risking your computer safety and getting infected with malware.
If you subscribed to notifications, you can remove Torrent9.so ads relatively easily. All you have to do is access your browser's settings and tweak them – we provide detailed instructions below.
Finally, if you downloaded some additional programs from the site, we strongly advise you to scan your machine with SpyHunterCombo Cleaner, MalwarebytesMalwarebytes to check for infections, as well as a PC repair tool FortectIntego to remediate the machine's settings and system files.
Torrent sites hide imminent danger
As mentioned above, peer-to-peer downloads and media sharing is a completely legal practice, as long as it is used for downloading non-copyrighted content. However, most of the torrent sites host plenty of licensed (cracked) software, games, movies, and other content. Most users who come to such sites know what they are doing, although they choose to ignore warnings about malware residing there.
Since torrents are particularly popular – they receive thousands of visits every day – it is a perfect breeding ground for malware distribution. Malicious actors can hide malware in various components within site, including:
- Ads that can launch automated scripts;
- Exploits, such as Magnitude;[3]
- The downloaded content via torrents (for example, a video ending with .LNK extension is likely to be malware in disguise).
Most concerning is that users who do have security software tend to ignore warnings when they arise, as they believe it is a false positive. As soon as a malicious file is launched, the infection routine begins. Torrent viruses can be found all across the web, so we strongly recommend avoiding sites that offer cracks, keygens, illegal movies, and similar content altogether.
Get rid of Torrent9.so virus and ads
First and foremost, if you were redirected from the site to a suspicious place and downloaded a seemingly legitimate file, there is a chance that there is a virus installed on your machine. Thus, you should immediately perform a full system scan with a reputable security tool and remove adware for good. Additionally, adware could be a culprit of intrusive ads and redirects, so you can check the manual instructions below in order to eliminate it yourself.
If you subscribed to notifications upon site entry, you could get rid of Torrent9.so ads by preventing the site from showing them. For that, you have to access the settings section of your Chrome browser:
- Select Menu > Settings > Advanced
- Click on Site Settings > Notifications
- Check the Allow section and find the address of the site in question
- Select More Actions and pick Block.
The instructions for other browsers are are similar – all you have to do is prevent notifications from being shown.
Uninstall from Windows
Uninstall from Windows 10/8:
- Type Control Panel into the Windows search box and open the result.
- Under Programs, select Uninstall a program.

Uninstall from Windows 7/XP:
- Click on Windows Start > Control Panel (Windows XP users should click on Add/Remove Programs).
- In Control Panel, select Programs > Uninstall a program.

Remove the unwanted program:
- In the Programs and Features window, look for any recently installed suspicious entries, select them, and click Uninstall.
- If User Account Control appears, click Yes to confirm, then complete the removal.

Delete from macOS
Remove the unwanted application:
- From the menu bar, select Go > Applications.
- In the Applications folder, look for any suspicious entries, then drag them to Trash (or right-click and pick Move to Trash).

Delete leftover files and folders:
- Select Go > Go to Folder.
- Enter /Library/Application Support and remove any suspicious folders related to the unwanted program.
- Repeat the same check in the /Library/LaunchAgents and /Library/LaunchDaemons folders, deleting any suspicious entries.

- Finally, empty the Trash to permanently remove the leftovers.
Remove from Microsoft Edge
Delete unwanted extensions from MS Edge:
- Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
- From the list, pick the extension and click on the Gear icon.
- Click Remove.

Clear cookies and other browser data:
- Click on the Menu (three horizontal dots at the top-right of the browser window) and select Settings > Privacy, search, and services..
- Under Clear browsing data, pick Choose what to clear.
- Select Cookies and other site data and Cached images and files. (apart from passwords, although you might want to include Media licenses as well, if applicable) and click on Clear.

Restore new tab and homepage settings:
- Click the menu icon and choose Settings.
- Then find On startup section.
- Click Remove next to any suspicious startup page.
Reset MS Edge if the above steps did not work:
- Press on Ctrl + Shift + Esc to open Task Manager.
- Click on More details arrow at the bottom of the window.
- Select Details tab.
- Now scroll down and locate every entry with Microsoft Edge name in it. Right-click on each of them and select End Task to stop MS Edge from running.

Instructions for Chromium-based Edge
Delete extensions from MS Edge (Chromium):
- Open Edge and click select Settings > Extensions.
- Delete unwanted extensions by clicking Remove.

Clear cache and site data:
- Click on Menu and go to Settings.
- Select Privacy, search and services.
- Under Clear browsing data, pick Choose what to clear.
- Under Time range, pick All time.
- Select Clear now.

Reset Chromium-based MS Edge:
- Click on Menu and select Settings.
- On the left side, pick Reset settings.
- Select Restore settings to their default values.
- Confirm with Reset.
- This will disable extensions and reset startup pages but will not delete bookmarks, saved passwords, or browsing history.

Remove from Mozilla Firefox (FF)
Remove dangerous extensions:
- Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
- Select Add-ons.
- In here, select the unwanted extension and click Remove.

Reset the homepage:
- Click three horizontal lines at the top right corner to open the menu.
- Choose Settings.
- Under Home, set your preferred homepage and new tab settings.
Clear cookies and site data:
- Click Menu and pick Settings.
- Go to Privacy & Security section.
- Scroll down to locate Cookies and Site Data.
- Click on Clear Data...
- Select Cookies and Site Data and Temporary cached files and pages, then click Clear.

Reset Mozilla Firefox
If clearing the browser as explained above did not help, reset Mozilla Firefox:
- Open Mozilla Firefox browser and click the Menu.
- Go to Help and then choose Troubleshooting Information.

- Under Give Firefox a tune up section, click on Refresh Firefox...
- Once the pop-up shows up, confirm the action by pressing on Refresh Firefox.

Remove from Google Chrome
Delete malicious extensions from Google Chrome:
- Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
- In the newly opened window, you will see all the installed extensions. Uninstall all suspicious extensions related to the unwanted program by clicking Remove.

Clear cache and web data from Chrome:
- Click on Menu and pick Settings.
- Under Privacy and security, select Clear browsing data.
- Select Browsing history, Cookies and other site data, as well as Cached images and files.
- Click Clear data.

Change your homepage:
- Click menu and choose Settings.
- Look for a suspicious site in the On startup section.
- Click on Open a specific or set of pages and click on three dots to find the Remove option.
Reset Google Chrome:
If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:
- Click on Menu and select Settings.
- In the Settings, scroll down and click Advanced.
- Scroll down and locate Reset and clean up section.
- Now click Restore settings to their original defaults.
- Confirm with Reset settings.

Delete from Safari
Remove dangerous extensions:
- Open Safari, click Safari in the menu at the top-left of the screen, and select Preferences.
- Go to the Extensions tab, look for any suspicious entries, and click Uninstall to remove them.

Clear history and website data:
- Click Safari in the menu and pick Clear History.
- Set Clear to all history and confirm with Clear History.

Reset Safari:
- Click Safari in the menu and select Preferences > Advanced.
- Enable Show Develop menu in menu bar.
- From the menu bar, click Develop and select Empty Caches.

Did this guide help?
Be the first to comment