Clean Wine Prefix Executable msiexec.exe Detected as Virus -- False Positive?

[TommyC]

Hello,

I just wanted to know if the msiexec.exe created with each wine prefix under

Code: Select all

$WINEPREFIX/drive_c/windows/{system32,syswow64}/msiexec.exe

is a false positive when detected by anti-virus scanners.

The only relevant result I could find was this Gentoo forum post from 3 years ago which ClamAV detects as the same virus: https://forums.gentoo.org/viewtopic-t-1 ... art-0.html. Even with "site:winehq.org" added to restrict my searches here, I wasn't able to find any relevant posts.

I decided to upload my msiexec.exe to VirusTotal to make use of more than one scanner and here were the results: https://www.virustotal.com/gui/file/871 ... 460cebb14c

I asked two other individuals to upload their msiexec.exe. One individual is using wine-staging-7.6 and another is using proton through conty. I am using vanilla wine-9.6. The following are their results.

Proton (Conty): https://www.virustotal.com/gui/file/161 ... 3483fa183b

Wine-Staging (7.6): https://www.virustotal.com/gui/file/2a1 ... cb8273f499




Thank you in advance for any help.