It seems to me that a government sponsored virus would look for a fingerprint for something like Tor. Whose to say the virus isn't a virus but rather a part of

It seems to me that a government sponsored virus would look for a fingerprint for something like Tor. Whose to say the virus isn't a virus but rather a part of a retail product placed there in cooperation between industry and government. If you want true security you need to use open products.