TornTV Hijacker

TornTV Hijacker Description

TornTV Hijacker Image 1The TornTV Hijacker is a threat that is associated with Torn TV, an online service that supposedly allows computer users to watch TV shows on their computer, both in live streams and by downloading videos of the episodes the user wants to watch. It is possible to install Torn TV directly from the company's website. Security researchers have observed that criminals bundle this application with malicious toolbars and adware, such as CouponDropDown. This added malware will often be installed by default unless the computer user opts out. However, the installer is designed to make the opt-out check boxes easy to miss. It is also important to point out that Torn TV and the TornTV Hijacker are built on Yontoo, a platform that has been closely associated with adware and irritating browser hijackers. ESG security researchers consider that the TornTV Hijacker poses as a security risk.

The TornTV Hijacker May Be Associated with the Bifrose Backdoor Trojan


One of the reasons why ESG security researchers consider the TornTV Hijacker more dangerous than typical adware hijackers is that there have been reports of the TornTV Hijacker being installed along with the Bifrose backdoor Trojan. This is a dangerous malware infection that creates an unauthorized opening in the infected computer's security. This allows criminals to gain access to the infected computer from a remote location, allowing them to spy on your online activity and install other malware on your computer.

The main symptom associated with TornTV Hijacker is the way TornTV Hijacker affects its victim's web browsing. The TornTV Hijacker takes over the victim's web browser, forcing it to visit the Torn TV website repeatedly. The victim's homepage, default search engine, favorite websites and other predetermined websites may also be changed by the TornTV Hijacker without the computer user's authorization. Since the TornTV Hijacker makes unwanted changes to your web browser's settings, removing TornTV Hijacker involves undoing these unwanted changes as well. ESG security researchers advise using a reliable anti-malware program to remove the TornTV Hijacker from your computer and then making sure that all of your security settings and web browser preferences had been restored to what they were before the computer was infected with the TornTV Hijacker.

Infected with TornTV Hijacker? Scan Your PC for Free

Download SpyHunter’s Spyware Scanner
to Detect TornTV Hijacker

Security Doesn't Let You Download SpyHunter or Access the Internet?


Solutions: Your computer may have malware hiding in memory that prevents any program, including SpyHunter, from executing on your computer. Follow to download SpyHunter and gain access to the Internet:
  • Use an alternative browser. Malware may disable your browser. If you're using IE, for example, and having problems downloading SpyHunter, you should open Firefox, Chrome or Safari browser instead.
  • Use a removable media. Download SpyHunter on another clean computer, burn it to a USB flash drive, DVD/CD, or any preferred removable media, then install it on your infected computer and run SpyHunter's malware scanner.
  • Start Windows in Safe Mode. If you can not access your Window's desktop, reboot your computer in 'Safe Mode with Networking' and install SpyHunter in Safe Mode.
  • IE Users: Disable proxy server for Internet Explorer to browse the web with Internet Explorer or update your anti-spyware program. Malware modifies your Windows settings to use a proxy server to prevent you from browsing the web with IE.

If you still can't install SpyHunter? View other possible causes of installation issues.

Technical Information

Infection Statistics


Our MalwareTracker shows malware activity across the world. Explore real-time data of TornTV Hijacker outbreaks and other threats from global to local level.

File System Details

TornTV Hijacker creates the following file(s):
# File Name Size MD5 Detection Count
1 %PROGRAMFILES(x86)%\Torntv V9.0\e2778b28-928c-4697-894d-65311608041e-5.exe 321,536 40eec258a66501f1abb91c1c58547d5e 994
2 %APPDATA%\TornTV.com\TornTVSvc.exe 10,240 c74601ead53886654fbcac6dd45ad973 3,607
3 %PROGRAMFILES%\Torntv V6.0\Torntv V6.0-updater.exe 346,112 ae7662ed9592035062abf7a988ae52ee 2,706
4 %PROGRAMFILES%\Torntv 2\Torntv 2-updater.exe 361,984 e732b2346caaaf541089305353fe55c7 2,091
5 %PROGRAMFILES%\Torntv 2\Torntv 2-enabler.exe 342,528 6fafa05e46fdbb57020cf3e1063ba1ba 1,965
6 %PROGRAMFILES%\Torntv 2\Torntv 2-codedownloader.exe 476,672 93994230962159a3d8793af52c5bc2bb 1,824
7 %PROGRAMFILES%\Torntv V9.0\00e1002c-7029-4aa8-96af-5a4f99b861b7-5.exe 321,536 858f7ba571cd17b53851343ad9bfc3c0 1,501
8 %PROGRAMFILES%\Torntv V9.0\Torntv V9.0-firefoxinstaller.exe 958,976 1bd52e80b83dfea16007521265b18128 1,442
9 %PROGRAMFILES%\Torntv V9.0\Torntv V9.0-updater.exe 391,680 3c086105c5a2c948d4ea927540647c9f 1,413
10 %PROGRAMFILES%\Torntv V9.0\00e1002c-7029-4aa8-96af-5a4f99b861b7-2.exe 333,824 35345afa2d7825846d578a74c7b73102 1,190
11 %PROGRAMFILES%\Torntv V9.0\Torntv V9.0-chromeinstaller.exe 2,019,328 43e19eb7a8bd4ad0fe49e975159ad61b 1,160
12 %PROGRAMFILES%\Torntv V9.0\00e1002c-7029-4aa8-96af-5a4f99b861b7-4.exe 796,672 0cacee3742fd23626136433a0b025410 1,080
13 %PROGRAMFILES(x86)%\Torntv V6.0\Torntv V6.0-chromeinstaller.exe 497,664 3e02491a9f201386d5261d30618b5dfd 1,075
14 %PROGRAMFILES(x86)%\Torntv V9.0\e2778b28-928c-4697-894d-65311608041e-3.exe 1,861,120 e604d0ebda74f2f30db31ce7c9b50284 1,037
15 %PROGRAMFILES%\Torntv V6.0\Torntv V6.0-enabler.exe 334,336 7b9366fbb243e717725836e230dc5e4b 1,008
16 torntv.exe N/A
17 server.exe N/A
18 %ProgramFiles%\YontooIEClient.DLL N/A
19 %ProgramFiles%\TornTV.com\* N/A

More files

Registry Details

TornTV Hijacker creates the following registry entry or registry entries:
HKEY..\..\..\..{RegistryKeys}
SOFTWARE\Google\Chrome\Extensions\jbpkiefagocgkmemidfngdkamloieekf
SOFTWARE\Wow6432Node\Google\chrome\Extensions\jbpkiefagocgkmemidfngdkamloieekf
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload
SOFTWARE\Wow6432Node\Microsoft\Tracing\TornTVApp_setup(0)_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\TornTVApp_setup(0)_RASMANCS
SOFTWARE\Microsoft\Tracing\TornTVSetup_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\TornTVSetup_RASMANCS
SOFTWARE\Microsoft\Tracing\TornTVSetup_RASMANCS
Software\1ClickDownload
Software\AppDataLow\Software\Torntv 2
SOFTWARE\Classes\CrossriderApp0035578.Sandbox
SOFTWARE\Classes\CrossriderApp0035578.Sandbox.1
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{34523EBE-2AEA-4F74-8BF7-57A57340F705}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{34523EBE-2AEA-4F74-8BF7-57A57340F705}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8DE082C0-A649-4F61-B5F9-5163B39554F6}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{8DE082C0-A649-4F61-B5F9-5163B39554F6}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A64C07D1-4134-4519-AC44-86B47160B5CA}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Torntv 2-updater
SOFTWARE\Wow6432Node\Google\Chrome\Extensions\bicnnkjibmphdeigoodpjlcklcnaobdj
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{091f7430-e568-4477-8302-60be90dff142}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8f3263a9-ae07-449d-bf03-5cedf0e9d7ae}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9ce037a0-9f4d-4d58-82be-ce45256d47da}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ab3b6b05-5dfc-4ebd-a023-2bde2ef48487}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ecbe83d0-245c-4197-accb-06a3724d15d5}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ab3b6b05-5dfc-4ebd-a023-2bde2ef48487}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ecbe83d0-245c-4197-accb-06a3724d15d5}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311551178}
SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311551178}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311551178}
SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311551178}
SOFTWARE\Wow6432Node\Torntv 2
SOFTWARE\Classes\TorntvDownloader
SOFTWARE\Microsoft\Tracing\Torntv Downloader_RASAPI32
SOFTWARE\Microsoft\Tracing\Torntv Downloader_RASMANCS
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0C64E84F-408D-4348-8ADE-138572C4D5AB}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{22209AC9-0201-4541-B862-66EA748B3BD8}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A79CD199-C1BB-4E1A-AA20-FE4806B80D09}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{A79CD199-C1BB-4E1A-AA20-FE4806B80D09}
Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration, value: {11111111-1111-1111-1111-110311551178}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110311551178}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9518bc89-9639-4183-804d-7af98b230886}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c002c2b0-b030-4fb9-898f-66aa04ed7768}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d59e146b-1f74-453f-8244-899e65b3d975}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0eac069f-41c7-4df5-8143-3808234c9e15}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{698052cc-e3ca-48c9-ae68-6d5d5934797c}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9518bc89-9639-4183-804d-7af98b230886}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c002c2b0-b030-4fb9-898f-66aa04ed7768}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EA70A6C7-161C-483D-B32F-4266DDB86615}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION, value: Torntv 2-bg.exe
Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Torntv 2
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21d81749-b73c-4ada-a1e9-f3c79779a743}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{224F7B07-84A5-458E-9EE6-C2AE3F8FD2F1}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{307A4582-2811-4065-9B51-DFAC118B1B0}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5cfad20e-6920-4da6-8014-cb1a1347d497}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7d7b90ec-0f77-49ec-bfa5-07a12bb9f394}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ADADB96B-DFE9-44C9-BEC6-BE93CA9EFFD8}
SOFTWARE\Classes\.torrent\OpenWithProgIDs, value: TorntvDownloader
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{319A2F95-7DD1-413F-B6F0-574CDBD48A98}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C545FCA6-A075-4CD4-BA81-5A6D635C477A}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D952FDC1-084A-46E6-8251-D1E2F13A98BD}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110311551178}
Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Torntv 2
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7d7b90ec-0f77-49ec-bfa5-07a12bb9f394}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d49cfa8c-0142-453f-bc43-12931743833d}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{df1ddecd-5fe5-4e0c-872b-ae4985af5171}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E0443337-DAF3-46C4-B73B-4C825FD281F2}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Torntv V6.0-codedownloader
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Torntv V6.0-enabler
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Torntv V6.0-updater
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Torntv V6.0
SOFTWARE\Wow6432Node\Torntv V6.0
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Torntv V6.0
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{70fc0ad7-e6e0-4273-8d17-63b240e194b2}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{783A59D7-9941-4B87-810B-A7CECB10E03E}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B4C92D3D-CB71-497E-A61D-5373E5F1F824}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{783A59D7-9941-4B87-810B-A7CECB10E03E}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{B4C92D3D-CB71-497E-A61D-5373E5F1F824}
SOFTWARE\Classes\CrossriderApp0045960.BHO.1
SOFTWARE\Classes\CrossriderApp0045960.Sandbox
SOFTWARE\Classes\CrossriderApp0045960.Sandbox.1
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{44141d66-1fa6-4c28-b2d9-07fd14352eb6}
CrossriderApp0045960.BHO
CrossriderApp0045960.BHO.1
CrossriderApp0045960.Sandbox
CrossriderApp0045960.Sandbox.1
Software\AppDataLow\Software\Torntv V6.0
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{26255856-E470-40E5-B415-C072B398B667}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3AAEC42E-F1D5-4C0E-84CA-689862BEEF5C}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{44141d66-1fa6-4c28-b2d9-07fd14352eb6}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68A36E24-221F-40C2-8AB1-9C3F2F5A7FD}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{70fc0ad7-e6e0-4273-8d17-63b240e194b2}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C4E3AD9D-8561-4BA5-A36B-116F6E795E4}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d8440e5c-16c7-4ada-855f-d069c4a64673}
Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID, value: {11111111-1111-1111-1111-110411591160}
SOFTWARE\Classes\CrossriderApp0045960.BHO
Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Torntv V6.0
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{44141d66-1fa6-4c28-b2d9-07fd14352eb6}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d8440e5c-16c7-4ada-855f-d069c4a64673}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{BE7C0C03-BB4A-4321-B03C-6916390E408B}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BE7C0C03-BB4A-4321-B03C-6916390E408B}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{AF1E18CD-FBE1-45DF-AFBA-E861CD44E50C}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AF1E18CD-FBE1-45DF-AFBA-E861CD44E50C}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{08FE3E58-4843-404F-8C9C-B83B40CCC785}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{08FE3E58-4843-404F-8C9C-B83B40CCC785}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{67D5787F-9B97-4EB3-BFCA-B860DD951367}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION, value: Torntv V6.0-bg.exe
SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION, value: Torntv V6.0-bg.exe
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110411591160}
SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110411591160}
Software\Microsoft\Internet Explorer\Approved Extensions, value: {11111111-1111-1111-1111-110411591160}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C2915CBA-B29B-4DBB-B353-14786BDD8247}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9F137908-9ED2-4324-9496-AE1A98FFD4F}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110411591160}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110411591160}
Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Torntv V6.0
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{8B85332B-0AA7-4957-B061-4248EF09E7B5}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1FA3E894-6D95-4025-9F70-9368EF6602C4}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1FA3E894-6D95-4025-9F70-9368EF6602C4}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8B85332B-0AA7-4957-B061-4248EF09E7B5}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Torntv V6.0-firefoxinstaller
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures, value: Torntv V6.0-firefoxinstaller.job
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1AFD3883-5D3E-4543-A0E8-7F8EEB067B0B}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1AFD3883-5D3E-4543-A0E8-7F8EEB067B0B}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures, value: Torntv V6.0-updater.job
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures, value: Torntv V6.0-updater.job.fp
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6E1A1E61-DEA7-4839-941F-1A6A2D793749}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0B73C215-F61D-4C3E-8DDD-4A32B1BD24A5}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{0B73C215-F61D-4C3E-8DDD-4A32B1BD24A5}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{6E1A1E61-DEA7-4839-941F-1A6A2D793749}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C9B5FF18-D8D7-4E1D-BB69-A0758136C82E}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A470378E-F27B-4B59-B39E-184AB229832}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{84064745-9989-41C5-A184-555A4E64BEB}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{57D34FE3-A20B-4620-81E2-904865306}
Software\AppDataLow\Software\Crossrider\onBeforeNavigate, value: 45960
Software\AppDataLow\Software\Crossrider\onRequest, value: 45960
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0f907b72-fb4a-456f-a3b0-473257174ee0}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{96fd5a86-ae97-4f6c-9f06-0241887d2c27}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{b85c7368-970c-4bee-8125-d0d03b9de96e}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{cad24353-257d-4344-b34a-d6a06ddfc5c9}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D0A0465D-7ADF-4281-829E-FF29F8E5B8D2}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D4EB1088-F2C7-4E50-849E-BA41AC82EF5B}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Torntv V6.0-chromeinstaller
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0f907b72-fb4a-456f-a3b0-473257174ee0}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6051d6b1-5307-4dda-a573-5ac084f898b8}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{cad24353-257d-4344-b34a-d6a06ddfc5c9}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION, value: Torntv V7.0-bg.exe
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Torntv V7.0
SOFTWARE\Wow6432Node\Torntv V7.0
SOFTWARE\Torntv V7.0
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{7EF3C907-B43F-46AD-892A-CA39B4452933}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5F5D8282-B4F6-4B81-9001-E423159B4373}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5F5D8282-B4F6-4B81-9001-E423159B4373}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{61AB93D5-0D71-45E7-A8C9-75D95268499B}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{61AB93D5-0D71-45E7-A8C9-75D95268499B}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6D860DCD-6E76-4788-856D-0CF9A9C6DB01}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7EF3C907-B43F-46AD-892A-CA39B4452933}
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411901140}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411901140}
SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110411901140}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110411901140}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{03a7f11c-9738-4147-aa95-53f19f7acaf6}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4391e1a3-6881-425b-8f13-e1d11b4e4cda}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110411901140}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110411901140}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{03a7f11c-9738-4147-aa95-53f19f7acaf6}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1D1D6907-7E1B-4F6F-8E1C-269D38742D36}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4391e1a3-6881-425b-8f13-e1d11b4e4cda}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{556843BC-C1FD-4637-91AC-36FDFED0FF1D}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{844df3e1-690e-4fee-b263-3c437e27d628}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{febbade8-04ef-47cd-9766-290e82ccfe52}
Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Torntv V7.0
Software\AppDataLow\Software\Crossrider\onBeforeNavigate, value: 49040
Software\AppDataLow\Software\Crossrider\onRequest, value: 49040
Software\AppDataLow\Software\Torntv V7.0
Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Torntv V7.0
Software\Microsoft\Internet Explorer\Approved Extensions, value: {11111111-1111-1111-1111-110411901140}
SOFTWARE\Classes\CrossriderApp0049040.Sandbox.1
CrossriderApp0049040.BHO
CrossriderApp0049040.BHO.1
CrossriderApp0049040.Sandbox
CrossriderApp0049040.Sandbox.1
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Torntv V7.0-chromeinstaller-dev
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Torntv V7.0-codedownloader
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Torntv V7.0-enabler
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Torntv V7.0-firefoxinstaller
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Torntv V7.0-updater
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1B843072-7C43-44E7-8B1C-8FA2C79F266}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{32399bf9-e805-48cd-9cd5-6db342637d93}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{41e47e29-dd18-456a-aff0-1402d0199fa2}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4a6e3be0-39c6-41fa-8835-f6e437b3bd00}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{503526f3-7148-4c55-9bc1-fc010fb1f1b0}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C3CB6095-1D8-4D9F-92EA-9B4BA7D5388}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F5C4E72F-CF92-436F-A239-97AD87CBDC57}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{32399bf9-e805-48cd-9cd5-6db342637d93}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{41e47e29-dd18-456a-aff0-1402d0199fa2}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4a6e3be0-39c6-41fa-8835-f6e437b3bd00}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{503526f3-7148-4c55-9bc1-fc010fb1f1b0}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7dd830f7-5ac9-4a88-af55-5ed160f45940}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BC114374-5946-4F94-A23C-A15B1771E9B0}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{BA9B5F97-E948-4A57-BDAB-013C1FB32BF0}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BA9B5F97-E948-4A57-BDAB-013C1FB32BF0}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{B30BC5FA-B9A6-4D2A-B320-0E30178F14CB}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B30BC5FA-B9A6-4D2A-B320-0E30178F14CB}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{4DE7F937-B6E0-49BA-9A2F-7DDB3D347F2D}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4DE7F937-B6E0-49BA-9A2F-7DDB3D347F2D}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B6348A2D-2459-4D99-A879-37C2848F916F}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1286ADD5-B5CD-4F53-9BE8-84EF53489F70}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{bdd1aa4a-cf3b-4d86-8b8d-b1952ddf98dc}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{b4991eab-abe3-4c40-8ef6-2480e8130f0e}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{129f0bb7-0f11-498a-9dd0-55a7dc4a0ee8}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E2E8988A-4319-455E-8725-41B36B7B3A2F}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DDD9D525-559C-4725-ADAE-D0D7993D0AC}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{bdd1aa4a-cf3b-4d86-8b8d-b1952ddf98dc}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BB0DD26-EEBA-4C5D-8E71-774CAE59D5E}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{b4991eab-abe3-4c40-8ef6-2480e8130f0e}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9664dbed-195f-45a4-97b4-2c63b9b37ba1}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{58336c9a-3fbb-4442-856c-3a7f64893037}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7E05060-1BD0-4415-8C7-A71E7EBDCBFA}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f5c71ade-a63e-45a5-af22-23a7450d68da}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{aa7a5866-e8ba-41e0-b374-632d91a3a844}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2271cf43-e150-4c15-afe3-16afe5ce780a}
.DEFAULT\Software\AppDataLow\Software\Torntv V6.0
.DEFAULT\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Torntv V6
Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration, value: {11111111-1111-1111-1111-110411591160}
SOFTWARE\Classes\CrossriderApp0051390.Sandbox.1
SOFTWARE\Classes\CrossriderApp0051390.Sandbox
SOFTWARE\Classes\CrossriderApp0051390.BHO.1
SOFTWARE\Classes\CrossriderApp0051390.BHO
CrossriderApp0051390.BHO
CrossriderApp0051390.BHO.1
CrossriderApp0051390.Sandbox
Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Torntv V9.0
Software\AppDataLow\Software\Torntv V9.0
Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Torntv V9.0
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511131190}
SOFTWARE\Torntv V9.0
SOFTWARE\Wow6432Node\Torntv V9.0
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Torntv V9.0
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID, value: {11111111-1111-1111-1111-110511131190}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID, value: {11111111-1111-1111-1111-110511131190}
SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION, value: Torntv V9.0-bg.exe
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION, value: Torntv V9.0-bg.exe
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110511131190}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110511131190}
Software\AppDataLow\Software\Crossrider\onBeforeNavigate, value: 51390
Software\AppDataLow\Software\Crossrider\onRequest, value: 51390
SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110511131190}
Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration, value: {11111111-1111-1111-1111-110511131190}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{e25bd778-2418-43bd-b417-98d94f67b0ed}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f585a701-a226-4877-9017-837f3e37a228}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{fa83ca79-53ef-4d9d-b3a0-8724dc94fbae}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7e8b9605-0386-4d5b-973f-06444721f450}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ccffe97f-6737-43a1-a9f9-4a0c78082e0b}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{e25bd778-2418-43bd-b417-98d94f67b0ed}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f585a701-a226-4877-9017-837f3e37a228}
SOFTWARE\Wow6432Node\InstalledBrowserExtensions\3874
Software\InstalledBrowserExtensions\3874
Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration, value: {11111111-1111-1111-1111-110411901140}
Software\Crossrider\onBeforeNavigate, value: 51390
Software\Crossrider\onRequest, value: 51390
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{046b5803-0809-4af4-86d1-49a8a6e3e77e}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{84014d04-125a-4cb6-99a8-dc29ee36459f}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{bc8988c0-651c-4ae6-a307-1ab9e2da67b9}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9F6C49AF-461C-48C6-B98F-B859AA7DC60E}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4A86DC75-7CB1-4BB5-BC86-B29EB9747AFF}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ECFEDCE-8583-4556-80EF-D332C41EFF2E}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A048567D-3FE2-4845-ADE7-6CE2CDB124E}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5DC5FD95-9055-4FBC-8336-2556B3CD2FF1}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{16024764-570D-4973-B919-281058E153C0}
Software\InstalledBrowserExtensions\tom, value: 51390
SOFTWARE\V9.0 Torntv 1.1
SOFTWARE\Wow6432Node\V9.0 Torntv 1.1
Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\TheTorntv V10
Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\TheTorntv V10
Software\InstalledBrowserExtensions\esc, value: 61855
SOFTWARE\Classes\TorntvDownloader.torrentFile
TorntvDownloader.torrentFile
Software\TornTv Downloader
SOFTWARE\Microsoft\Tracing\TornTvUpdater_RASAPI32
SOFTWARE\Microsoft\Tracing\TornTvUpdater_RASMANCS
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F488450B-00EC-484D-AA24-327482DE5B2A}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D9843FE2-11C7-4F8F-97D3-BAF802AD452C}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D86317A0-B6FA-4701-A9B3-BA20BDBCB8E5}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{CE657D5E-F7FB-411A-B96A-6B4D750D23E8}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{C82A6D8E-A6AB-4DD4-8776-94F5C741557C}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5CB0508B-4DCF-4784-8DB3-4A35F634DF9A}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{311782CF-F1FA-4A86-8FDB-D855F17F4F38}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D86317A0-B6FA-4701-A9B3-BA20BDBCB8E5}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CE657D5E-F7FB-411A-B96A-6B4D750D23E8}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C82A6D8E-A6AB-4DD4-8776-94F5C741557C}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5CB0508B-4DCF-4784-8DB3-4A35F634DF9A}
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{311782CF-F1FA-4A86-8FDB-D855F17F4F38}
SYSTEM\ControlSet001\services\trntv
SYSTEM\ControlSet002\services\trntv
.DEFAULT\Software\TornTv Downloader
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7D2C3CA4-2101-4CFD-8EFB-A4A2C5352AE1}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{80340714-3B0-45D3-BEE6-524040805D}
Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ac675dc0-4e83-4f1e-a6aa-2fadf678459f}
SOFTWARE\Microsoft\Windows\CurrentVersion\Run, value: TornTv Downloader
SOFTWARE\Google\Chrome\Extensions\nbmafkdmkkckhggblphicnnhlgljnoje
SOFTWARE\Wow6432Node\Google\Chrome\Extensions\nbmafkdmkkckhggblphicnnhlgljnoje
SOFTWARE\Classes\9ab333d0052b01323ffd0f6cdde3bdb00063311.Sandbox
SOFTWARE\Classes\9ab333d0052b01323ffd0f6cdde3bdb00063311.Sandbox.1
SOFTWARE\Microsoft\Tracing\TornTVSvc_RASAPI32
SOFTWARE\Microsoft\Tracing\TornTVSvc_RASMANCS
Software\InstalledBrowserExtensions\Qwerty, value: 63311
Software\InstalledBrowserExtensions\Qwerty, value: 68855
HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}
Torntv V7.0
1ClickDownload
V9.0 Torntv 1.1
The following CLSID's were found:
HKEY..\..\{CLSID Path}
{11111111-1111-1111-1111-110411591160}
{11111111-1111-1111-1111-110411901140}
{11111111-1111-1111-1111-110511131190}
{22222222-2222-2222-2222-220322552278}
{22222222-2222-2222-2222-220422592260}
{22222222-2222-2222-2222-220422902240}
{44444444-4444-4444-4444-440444594460}
{44444444-4444-4444-4444-440444904440}
{44444444-4444-4444-4444-440544134490}
{55555555-5555-5555-5555-550355555578}
{55555555-5555-5555-5555-550455595560}
{55555555-5555-5555-5555-550455905540}
{66666666-6666-6666-6666-660466596660}
{66666666-6666-6666-6666-660466906640}

More Details on TornTV Hijacker

The following URL's were found:
Tip: We recommend blocking the domain names as well as the IP addresses associated with them.
  • torntv-downloader-dl.info
  • torntv-downloader.com
  • torntv-tvv.org
  • torntv.com

Site Disclaimer

Leave a Reply

IMPORTANT! To be able to proceed, you need to solve the following simple math.
Please leave these two fields as-is:
What is 4 + 6 ?