protonscr

Potential trojan distributed by Steam via Proton Experimental

protonclosed
ValveSoftware/Proton#4738 · opened 2021-04-05 by RealTehreal · updated 2021-04-07 · 8 comments · github
RRealTehreal 2021-04-05 github

Hey folks,

the current Proton Experimental version distributed by Steam has iexplore.exe with potential trojan infection included.
https://www.virustotal.com/gui/file/e46d083ba31a8d51796b5191bead6d0a9f12cc7564f0ac7b300b0697c1840c44/detection

Maybe it's a false positive but there are quite some anti virus engines reacting to this file.

Greets

BBumbadawg 2021-04-05 github

sounds like an .exe doesn't correspond to Windows official signatures. Nothing alarming mate.

RRealTehreal 2021-04-05 github

I see. First time this happened at my end though.

BBumbadawg 2021-04-05 github

You run virustotal on your PC files on Linux ?

RRealTehreal 2021-04-05 github

I run nod32 which found the file in question suspicious. I then used virustotal to see what other engines think about the file.

BBumbadawg 2021-04-06 github

Seems like Windows Defender exists even on Linux nowadays. Maybe this one should know which operating system the analyzed ieplorer.exe is running.

Aaeikum 2021-04-06 github

The switch to PE files has set off a lot of anti-virus checkers, unfortunately. There's not much to be done about it other than report the false positives to the vendors.

RRealTehreal 2021-04-07 github

I see. That's what I already did.

Proton versions