When i run Malware on Wine, that Encrypt all file on /home/username/... or folder on other devices was mounted;
I'm have tried removed Z: device on winecfg or on $prefix/dosdevices, but wine always show/active "\\?\\unix\" folder, that link to "\" (root) on linux.
There are plenty of ways for malware to do whatever your regular Linux user can do when running under Wine, some of which would be impossible for Wine to prevent, if that were a goal of the project which it isn't. Please don't use Wine to run malware without some other way of containing it.