Does wine for android have a virus?
Does wine for android have a virus?
Hi I wanted to use wine for android on my phone so i checked it in virustotal and 19/57 antivurses found it as a virus, im assuming these are false positives but I want some confirmation. Ty in advance https://i.imgur.com/18iZc4g.png (picture of virustotal)
-
- Level 1
- Posts: 5
- Joined: Sun Sep 19, 2021 4:46 pm
Re: Does wine for android have a virus?
I do not think that is the official wine for android apk, please install it from the official website here https://wiki.winehq.org/Download.
Check on VirusTotal after the fact to see if it has a virus, if it does then your internet is probably compromised somehow, I trust WineHQ and Wine, you probably got it from a spam link.
Check on VirusTotal after the fact to see if it has a virus, if it does then your internet is probably compromised somehow, I trust WineHQ and Wine, you probably got it from a spam link.
- JoseskVolpe
- Level 4
- Posts: 103
- Joined: Sat Sep 04, 2021 9:35 pm
Re: Does wine for android have a virus?
I have downloaded it from the official download page and scanned it, and i can confirm that. VirusTotal identify Wine 6.14 x86 as virus in 18 of 51 anti-virus.
https://i.imgur.com/WLVQZ2E.png
All the files that has been deleted by these anti-virus programs are DLLs and EXEs with the same name from Microsoft Windows system DLLs and EXEs, like rundll.exe and vbscrip.dll. I think that it's because these anti-virus softwares are comparing Wine System DLLs and EXEs with original Microsoft's DLLs and EXEs. Because Wine has different codes and compiled binaries from Microsoft's original ones, it has a different Hash string, so these anti-virus detect as these files where modified and falsified and detect as if they were files to be injected into a Windows operating system. That's why Wine is a 'virus' for them
But Wine isn't a virus, so it's a false positive.
https://i.imgur.com/WLVQZ2E.png
All the files that has been deleted by these anti-virus programs are DLLs and EXEs with the same name from Microsoft Windows system DLLs and EXEs, like rundll.exe and vbscrip.dll. I think that it's because these anti-virus softwares are comparing Wine System DLLs and EXEs with original Microsoft's DLLs and EXEs. Because Wine has different codes and compiled binaries from Microsoft's original ones, it has a different Hash string, so these anti-virus detect as these files where modified and falsified and detect as if they were files to be injected into a Windows operating system. That's why Wine is a 'virus' for them
But Wine isn't a virus, so it's a false positive.