[tor-talk] Panda antivirus now thinks Tor.exe is a virus

aka akademiker1 at googlemail.com
Tue Jun 16 16:28:48 UTC 2015


Panda AV detects a lot of false positives, including itself:
http://www.pandasecurity.com/usa/enterprise/support/card?id=100045

https://www.virustotal.com/en/file/5590eee15536b9c585e9b8bfebfacebeb6d9b9ef5a436535b48b75a6a029f06b/analysis/1434471994/
VT says it's not detected by Panda, so might be a behaviour detection:
1) Browser downloads unknown exe without an 720°SuperTrust(tm) code
signing certificate
2) Browser saves unknown exe on disk
3) Browser starts unknown exe
4) unknown exe starts using internet

Speak Freely wrote:
> Greetings and salutations,
> 
> During the latest upgrade of TBB, Panda Antivirus had a shit fit, and
> deleted Tor.exe on me.
> 
> The upgrade was initiated by TBB, if that means anything.
> 
> Just thought I would share that.
> 
> 
> Matt
> Speak Freely
> 


More information about the tor-talk mailing list