[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-talk] Traced by my anti-virus?
Hello,
1) It depends on the version of TBB/OS/AV. For example entry from TWN:
An anonymous reporter reported [11] a potential leak when using the Tor
Browser Bundle 2.3.25-10 on Windows. If Microsoft Security Essentials or
another cloud based anti-virus solution is configured, downloads will
automatically be sent to these external providers — bypassing Tor — once
complete.
The reporter suggested setting the
‘browser.download.manager.scanWhenDone’ property to ‘false’ to prevent
anti-virus solutions from starting without user interaction.
-- Turned out this affects only finished downloads.
[11] https://bugs.torproject.org/9195
3) For forensics check out this paper:
https://research.torproject.org/techreports/tbb-forensic-analysis-2013-06-28.pdf
Hope this helps.
On 1.8.2013 13:08, Marcos Eugenio Kehl wrote:
Hello Rainmakers!
Questions for the experts:
1. Should I disable/shutdown my anti-virus before start Tor Browser? There is any risk of being traced by my anti-virus?
2. Must I erase all the metadata inside "event logs" in Windows 8, and use CCleaner after close Tor Browser?
3. We could talk a little bit more about computer forensics.
Thanks.
Marcos (Brazil)
--
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsusbscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk