The latest Tor release builds at the time of writing is v0.2.4.20.“ Unfortunately, the version installed by Sefnit is v0.2.3.25 – and does not self-update. “ Tor is a good application used to anonymize traffic and usually poses no threat. Microsoft points out several vulnerabilities in the Tor version v0.2.3.25 used by Sefnit, unfortunately the bundle is not upgradeable to the successive version, so the company decided to close loophole uninstalling the browser instead to simply delete the Sefnit code. Signature and remediation are included in all Microsoft security software, including Microsoft Security Essentials, Windows Defender on Windows 8, Microsoft Safety Scanner, Microsoft System Center Endpoint Protection, and Windows Defender Offline.” Reports Microsoft.

“ We modified our signatures to remove the Sefnit-added Tor client service. To sanitize the infected machines, Microsoft has updated all its security products including information and instructions to detect the presence of malicious Tor client service and remove it. Even after Sefnit is removed, unless specific care is taken, the Tor service will be left and still regularly connect to the Tor Network.‘” States the official blog post. “’ The security problem lies in the fact that during a Sefnit component infection, the Tor client service is also silently installed in the background. The Sefnit removal according Microsoft requests the execution of a specific procedures hard to explain to its customers, that’s why Microsoft decided to remotely erase every component belonging to the botnet. Microsoft experts remarked that Sefnit malware silently installed a Tor client on infected machines, even if it is removed the Tor service will be left and still regularly connect to the Tor Network.

How to remove tor browser on windows