Is proton vpn a virus?

VPN
1

uhm…

1527×336 11.7 KB

1132×375 15.9 KB

2

No, it’s not, but your malware detector seems to be mislabeling some aspects of our app. Please report this to us at: https://protonvpn.com/support-form so we can investigate.

3

From your screenshot, it looks like you are trying to see the VirusTotal page for the Windows installer for ProtonVPN v3.2.11.

The ProtonVPN_v3.2.11.exe file hosted on the official site https://account.protonvpn.com/downloads has a SHA-256 hash of eb37bf757a2613e6b5c0d328e9b27c64902249c510d8883593e83ff289794aa0.

Here is the VirusTotal page for that file:

https://www.virustotal.com/gui/file/eb37bf757a2613e6b5c0d328e9b27c64902249c510d8883593e83ff289794aa0

No security vendors and no sandboxes flagged this file as malicious. Whatever executable you’re checking on VirusTotal, its not the official one from Proton.

4

The official package of Proton VPN is not a virus. If your scanner is flagging it as such its possible it came from a spurious source. Might be best to remove the files and ensure you are downloading from https://protonvpn.com/

5

try downloading from the official site and not from some random website marked as life time premium free. lol

6

OP you can also see that the same file hash was submitted to VirusTotal by different users with different file names purporting to be different things.

This is likely not a repackaged version of protonvpn, but rather, purely a virus file that is being renamed different things and sent to different people. How did you obtain this file?

7

The screenshot posted by OP are indeed from the official Proton VPN executable: VirusTotal

However, the information from VirusTotal is misinterpreted by OP.
First, the comments on VirusTotal are always unreliable. Everyone can create an account and rate or comment on the file.
Second, “PE Resource Parents” are just a list of PE files containing a given file as resource. This means that OTHER files (malware) contain the clean ProtonVPN application together with the malicious payload.
“Execution Parents” is just a list of all files dropping the given file during its execution. Again, the malware drops the clean ProtonVPN in addition to the malicious payload.

So there is nothing to worry about…

8

OP appears to have strayed off the main road and downloaded a renamed version of LinkKin.pArk-NuMb.EXE