Norton 360 Antivirus now considers Tor Browser as a Trojan and removes it from a computer - 1st noticed Dec 9, 2022

Hey everyone – please make sure you’ve followed these steps to add Tor Browser related processes to your antivirus’ “allowlist”, before trying anything else:

1 Like

OK here is a work around. Get the older version of 11.5.8 here:
https://archive.torproject.org/tor-package-archive/torbrowser/11.5.8/

You want these two files for US English (or choose whatever language)
torbrowser-install-11.5.8_en-US.exe 2022-11-22 17:48 98M
torbrowser-install-11.5.8_en-US.exe.asc 2022-11-22 21:04 801

You can do your due diligence and verify the signature using the .asc file. See the Tor site

Download the install, disconnect your Internet, install the program then start the browser. You are now in Firefox and it is trying to connect to TOR. Go to the Tools/Settings/General (or click hamburger button on top right/settings), scroll to: Allow Firefox to, and select: Check for updates but let you choose to install them.

Exit, connect the Internet, and start TOR. Dismiss the option to update.

Duncan: Norton 360 does not have an “allow list” feature. Going to settings only allows allows me to “tour” the latest version of Norton 360 or set up their VPN (I’m using another VPN). There is no place for me to add Tor.exe to any list. I believe I mentioned that in my original post.

I get the same screen as pqgjr posted above (before I close it)

Someone from Tor Project needs to be talking to Norton to resolve this.

Another day I will try downloading the old version that BobbyB posted, and see if that works.

Have you tried Norton’s official support guide?

gus: Those instructions don’t work for Norton 360.

You can access the settings for “Device Security”; but the “Antivirus area” is grayed out. The only thing that can changed is the “Spam” area and the “Administrative Settings” which control how Norton operates in the background.

Same here. Fantastically annoying. Why hasn’t Norton fixed this. When installing it scans and says Tor is safe. But when you try to use it says it has detected Trojan Horse and removes Tor.exe ???

Please keep in mind we’re a relatively small nonprofit, however it looks like Norton users can report false positives here: NortonLifeLock Customer Support Portal

3 Likes

Could you be more specific? Where in the configuration panel of Norton did you the exclusions? Could you share the path? . I’m not a big computer expert, and i’ve been having the same problem, and also tried to change configurations, but didn’t work. Thanks!

The same is happening to me. I accesed Norton and reported a false positive: NortonLifeLock Customer Support Portal

I had the same problem with Norton today. I encourage others to enter this site and report the false positive. I already did it :slight_smile:

1 Like

Good News!
No security vendors and no sandboxes flagged this file as malicious.
it says 1 hour ago. it is now 12-Dec-2022 23:21 UTC-5

Looks like Norton fixed it or just followed the lead of others

Have not tried it yet

Just scanned it and OK and file insights trust it. Huston we have lift off.

I have Norton 360 deluxe. Does your version not have settings? Because that is where I changed 4 settings and have had no more problems. I hope the below information helps.

Settings - Firewall - Program control - set Tor option to allow

Settings - Antivirus - Data protector - Process exclusions - Add Tor to the list

Settings - Antivirus - Scans and risks - Items to exclude from scans - Add Tor to the list

Settings - Antivirus - Scans and risks - Items to exclude from auto protect, script control, etc, etc - Add Tor to the list

I have now reported this as a false positive using the above link, even though I did it verbally talking to Norton Dec 9

Let’s see what Norton does about it…

1 Like

how can i open tor browser again? its 4 days now that i can’t open my tor browser!!! whats happening ??? its stressed me out

Windows 10, Tor 12

Firstly. I have the Norton problem and I can’t find a way round it - even when my Norton was disabled, I tried the various kinds of bridges and none of them would connect.

But is there more to it than that? Is Tor Browser being outlawed in the UK, US, Australia and other “democracies”?

I’m asking that because Brave browser has suddenly stopped its Tor interface. And apparently (according to my other half, who put in a complaint to Norton earlier today) Norton are just one of many VPN providers who have made the decision to block Tor because they “had evidence it was used for illegal activities”. (That old saying about censorship - “equivalent to treating dandruff by decapitation” - springs to mind).

Please see the below topic under “Feedback”. Please follow the instructions and Norton link towards the bottom to report the false positive. The more reports the faster Norton will fix it.

Some antiviruses consider that files that have not been seen/used by a lot of users as suspicious. This can sometimes happen when there is a new version of the software. Hence, some antivirus software will pop up malware and/or vulnerability warnings when Tor Browser is launched. If you downloaded Tor Browser from our main website or used GetTor, and verified it, these are false positives and you have nothing to worry about. That said, I’d also encourage to report these false positives to the AV program so they can keep this information up to date.

I understand the concern but also on the positive side of things it seems (thanks to more and more users reporting the false positives) some anti-viruses have stopped showing these prompts. If you have downloaded a Tor Browser from our main website (or simply updated from the previous version) or used GetTor, and verified it, these are indeed false positives.

That said, what is the error you’re running into now when you launch the browser? Is it the same prompts from the anti-virus? From your earlier comment on the thread I am getting the impression that the anti-virus software might have already removed or deleted tor.exe, so you might have to download Tor Browser again.

Bonds: I only have Norton 360. I was not aware there was a “deluxe” version.

Plain Norton 360 does not have those settings options.

But good news… It now works. Norton has fixed the issue.