search

ValveSoftware / Proton

Compatibility tool for Steam Play based on Wine and additional components
Other
23.86k stars 1.04k forks source link

False Positive from Steam Proton Experimental? #7356

Open momonator25 opened 8 months ago

momonator25 commented 8 months ago

I'm running Steam on a Win11 Machine and of course have no Proton installed but the most recent full system scan of Windows Defender showed up one found Tojan on my System.

The path to the file is: SteamLibrary\steamapps\common\Proton - Experimental\files\lib\wine\i386-windows\msinfo32.exe

I loaded the file to VirusTotal

Also a Scan of Malewarebytes brought up several positives in the same folder (Logfile

For now moved the 5 files from the Malewarebytes Scan into Quarantine.

A reason for the installation of Proton could be my recent tinkering with dual booting into linux sharing the Steam library on my drive. So should not be a real problem but maybe worth checking?!

Otherwise close this issue!

n00btube3D commented 8 months ago

A quick Google search suggest this is possible for AV to falsely report wine libraries/exes as viruses. A few links:

  1. https://forum.winehq.org/viewtopic.php?t=33444
  2. https://bbs.archlinux.org/viewtopic.php?id=257880

And the virus names (Malware.AI.(id-nr)) suggest Malwarebytes AI analysis flagged it, which (imo) is more prone to error. https://www.malwarebytes.com/blog/detections/malware-ai

Personally, I wouldn't worry about it.