UNITED STATES: In a recent development, Microsoft Defender has officially acknowledged and rectified its false identification of the Tor Browser as malware, following a battle with the Tor Project to clarify the situation. The problem emerged within TorBrowser version 12.5.6 when Microsoft Defender erroneously categorized an executable file as unsafe.
However, the Tor Project spokesperson confirmed that this file was identical, byte-for-byte, to the previous version 12.5.5, dispelling any suspicions of malicious intent. For users of TorBrowser, this issue resulted in the tor.exe file being flagged as a trojan, specifically labelled as “Win32/Malgent!MTB,” rendering the software unusable for affected individuals.
During the interim period, some users reported success by reverting to the previous build (12.5.5), which did not trigger Windows Defender’s trojan response. The update from Microsoft followed Tor Project’s efforts to engage with the tech giant.
Tor shared the .exe file with Microsoft for inspection, leading to the following response: “At this time, the submitted files do not meet our criteria for malware or potentially unwanted applications. The detection has been removed.”
Users encountering difficulties with TorBrowser were advised to ensure that their Windows Defender was up to date and either unquarantine the tor.exe file or reinstall TorBrowser from the official Tor Project website. The latest signature database (1.397.1910.0) no longer identifies the tor.exe file as problematic.
The exact reason behind Windows Defender’s initial misidentification of the unchanged tor.exe file remains unclear. This resolution signifies a positive outcome for Tor Browser users, restoring their ability to browse securely and anonymously without the unnecessary interference of Microsoft Defender’s false malware alerts.
Also Read: Microsoft Set to Unleash AI Assistants for Windows and Office
