Can not get TOR browser to work

[hugomax]

I have tried searching the forum for an answer to this, but although others have post the same problem I have not found a solution.

I have tried adding TOR, TOR.EXE and the subfolder on the desktop as an exclusion but it doesnt work.

Is the TOR Browser and Malwarebytes compatible? Do I have to shut down Malwarebytes to use the TOR Browser? 

I am not after a technical response please, just simple instructions. Thank you

[1PW]

Hello @hugomax and welcome:

The system in question is the better for allowing MB3's protections to steer the system's pathway negotiations away from Tor entry, exit, and relay nodes of poor reputation.

If the system is using Tor 7.0.2, please detail the exact issue that is being experienced.  If error messages are seen, a screen grab would be helpful.

Thank you.

Edited August 4, 2017 by 1PW

[hugomax]

I used to be able to use TOR and Malwarebytes in tandom.  If the system has been changed so this is no longer possible doesn't this make my system more vulnerable to attack ?

I have attached the message that appears when I try to engage TOR.

[1PW]

Hello @hugomax:

Thank you for attaching the above .jpg file.  This is a typical good protection response from Malwarebytes 3 (MB3) when the Tor system has tentatively negotiated a path through a network relay that has been proven to involve risk to your system.  The path negotiation process will simply see MB3's protective blocking action as a "no timely response" from that Tor relay and continue on, via re-negotiation, till a safer path is established to a Tor exit relay.

This is a good thing and MB3 (and its protection modules) should be allowed function normally. i.e. that IP address should not be entered in MB3's exclusions.

Anecdotally, I too occasionally see similar good MB3 popup messages while using my Tor clients.

Thank you.

Edited August 4, 2017 by 1PW

[hugomax]

Thats great. But how do I get TOR and Malwarebytes working in tandem on my laptop (like they were doing before I rebuilt it). Or do I have to turn off Malwarebytes to use the TOR browsers?

[1PW]

Hello @hugomax:

It has never been necessary to make any accommodations for MB3 or Tor clients for normal simultaneous use.  Besides the very infrequent popups from MB3's web protection module, exactly what do you see when a Tor client connection is attempted with MB3 running normally?  If you are seeing other error messages, please capture and attach another relevant screen grab.  Have successful connections been made using the Tor client?  As significant data may be present in diagnostic logs, please follow the procedure below:

1. Please save your work and close all running user applications for your convenience.

2. Please follow the steps within the locked/pinned topic at Having problems using Malwarebytes? Please follow these steps.

3. In your next reply to this topic, please only ATTACH the three (3) separate files that are developed above: mb-check-results.zip, FRST.txt, and Addition.txt.

4. Additionally, please consider selecting the "Follow" button, near the upper-right corner of your topic, to receive punctual email notifications when updates are posted.

This reply was made using the Tor client 7.0.2 and the release version of MB3.  Thank you again.

Edited August 4, 2017 by 1PW

[Telos]

18 hours ago, hugomax said:

do I have to turn off Malwarebytes to use the TOR browsers?

Do you not get out at all? When I used TOR I would often get MBAM's website blocked notifications, but my client would just choose another connection, and in short order, I'd have a complete circuit.

I don't believe there is a workaround with out disabling web protection. If you choose to do that I'd rec that you run TOR sandboxed (for example using Sandboxie).

[hugomax]

No I dont get out at all. The connecting window in TOR just hangs and only the cancel button works. I shall follow the steps above and post the files.

[hugomax]

mb-check-results.zip

Addition.txt

FRST.txt

[Telos]

I'm sure someone will be along soon to help.

What happens when you "Manage Exclusions" on this alert

FWIW, VT has 2 "positives" on the site... so MBAM is doing what it should.

Edited August 6, 2017 by Telos

[hugomax]

I have added TOR as an executable and an application that connects to the internet. Neither has made any difference.

[Telos]

Does Tor Browser connect when you disable MBAM's web protection module? If so, I suspect that is the only recourse you have as tor sites are habitually laden with riskware or worse, hence my suggestion for running sandboxed if you must run Tor Browser.

[hugomax]

Why is this only happening to me? Surely this would be universal to all users. 

Is anyone going to provide feedback on the files that have been uploaded?

[MBFan2k20]

Sorry to necro-post, but I have found that the only recourse we have is to temporarily disable MB, start tor, and after it connects, re-enable/start up MB again...

[exile360]

Greetings,

Do you get any block notifications or detections from Malwarebytes when trying to launch TOR with Malwarebytes enabled?