I have found this entry in /etc/passwd:
debian-tor:x:117:123::/var/lib/tor:/bin/false
But there is no /var/lib/tor folder. This is on a server not a desktop.
SnapOverflow
