What is torsona.com?

Torsona.com is one of many Web-to-TOR gateways controlled by cyber crooks who created the CryptoWall ransomware. They change these gateways quite often for security reasons and because most anti-virus programs block those sites very quickly. Poltornik.com, dogotor.com, torforlove.com just to mention a few of them and cyber crooks keep constantly adding new gateways. Yours might be completely diferrent but if it looks just like the one shown below, it's pretty obvious that your files were encrypted by the CryptoWall virus.

Scammers have previously used TOR organization's Web-to-TOR gateways but most of them were shut down when organization discovered that CryptoWall was utilizing them. New malicious gateways were identified and blocked within a few hours. Cyber crooks had to create their own gateways if they wanted to stay in business. Unfortunately, CryptoWall payment servers can be reached again which means they can receive bitcoin payments once again.

Torsona.com itself isn't malicious. It's just a web page with your OS and IP address information as well as instructions on how to pay the ransom. If you were redirected to this web page then your computer is probably infected by CryptoWall virus.

The updated virus also has unique bitcoin payment addresses and more aggressive file encryption and deletion algorithms. To remove this virus from your computer, please read this removal guide.

Decrypt service

Your files are encrypted.

To get the key to decrypt files you have to pay 500 USD/EUR. If payment is not made before (time/date) the cost of decrypting files will increase 2 times and will be 1000 USD/EUR.

Written by Michael Kaur, http://deletemalware.blogspot.com