Here's the relevant part of the or-talk mailing list: http://archives.seul.org/or/talk/Sep-2007/threads.html#00045 (See threads 'Odd tor spam', 'Careful, you.re being watched', and 'Odd tor spam - Storm Worm'.) There are solutions to this sort of thing. The Tor developers cryptographically sign Tor, and of course you can download the source, read it, and compile yourself. Also note that if you want to use Tor to hide from the United States National Security Agency, you're screwed. Tor is excellent, but not that excellent. On 10/09/2007, David Gerard <dgerard(a)gmail.com> wrote:

It's of no importance to us but the article isn't accurate. The trojan claimed to be tor but isn't at all... On 9/10/07, David Gerard <dgerard(a)gmail.com> wrote: