Question How to know if Tor Browser is running at background in Windows 11?

[Manuel Jordan]

Hello

In some laptop of a member of the family was installed Tor Browser from its official page by a nephew and he didn't do the checksum.

After of the installation when he did do:

• press Windows key
• write the tor term as search term
• Click in the "executable" icon

It opened a cmd window showing some data, _it perhaps for 5 to 10 seconds_ and it was closed. Not sure if was manually or automatically

For the next repetition of the set of events mentioned above Tor opened.
Therefore exists the assumption that the first time was accomplished some settings by Tor.
Let me know if it is correct or not.

After to watch 2 or 3 videos on YouTube about the installation of Tor, that cmd window never has appeared as happened to the nephew.

Question

• How to know if Tor Browser is running at background in Windows 11?

Of course if it is the case and how to stop it

It was already uninstalled by deleting the folder of its own installation according with the official documentation

Thanks in advance

 

[USAFRet]

1. Task Manager. That should show what might be running.

2. Why does this nephew have enough rights to install things?

 

[Manuel Jordan]

Hello

In Windows 11 having installed Wireshark

Question

• What would be the correct filter(s) to know if Tor Browser is running?

and it even at background if is the case

Thank You

 

[Manuel Jordan]

Thanks for the reply

1. Task Manager. That should show what might be running.

Yes, done that and even with _Services_ (Just in case)
About Task Manager, how to know if a task is running at background or not?

2. Why does this nephew have enough rights to install things?

Reunion of the family and an uncle had shared the laptop with his nephew

 

[Cilantro7536]

When I run Tor, I click on the "Start Tor Browser" link, which runs Tor.exe in the background and starts up a Firefox browser. It DOES NOT open anything that shows a command window. I'm not sure if it EVER opened such windows in the past.

You can see tor.exe in the "Task Manager" by clicking on the "Details" tab in the left panel. If you run Microsoft's "Process Explorer" tool in admin mode, you can also observe the launched parameters.

 

[Ralston18]

Per @Cilantro7536

Process Explorer (Microsoft, free) - Yes.

https://learn.microsoft.com/en-us/sysinternals/downloads/process-explorer

 

[Manuel Jordan]

Thanks for that point