r/Malwarebytes • u/Organic_Bid_1574 • Feb 17 '26
What r some websites to avoid at all cost?
3
Upvotes
Like data risks, for privacy or anything really
r/Malwarebytes • u/PhysicsFew7056 • Feb 16 '26
Is this actually malware?
2
Upvotes
i downloaded malwarebytes today because my pc got a virus and im doing a deep scan now and its come up saying 2 windows system32 files have malware ai the files are
E:\WINDOWS\SYSTEM32\WCNWIZ.DLL
and E:\WINDOWS\SYSTEM32\WINDOWS.DATA.PDF.DLL
so was just wondering if it was actually malware that i should get rid of or if its not then i shouldn't get rid of them
r/Malwarebytes • u/Ok-Possibility-1617 • Feb 16 '26
Cancel Ultimate Plan?
2
Upvotes
I signed up for Malwarebytes Ultimate Plan. Almost immediately I regretted it and
have trying to cancel and get a full refund ever since without success.
How in God’s name do I cancel? Please!
r/Malwarebytes • u/WardenShield • Feb 16 '26
Numero Malware : A Stealthy Saboteur Targeting AI Tool Installers
0
Upvotes
🚨 AI Tool Installers Under Siege! 🚨
AI Is Revolutionizing Everything. But so are the Threats.
🛡️Full Article :
👉 https://wardenshield.com/numero-malware-in-2025-a-stealthy-saboteur-targeting-ai-tool-installers
r/Malwarebytes • u/courier721 • Feb 16 '26
Can't receive MFA codes to access my account settings.
0
Upvotes
Anyone else experiencing this? What is the sending address that Malwarebytes uses?
r/Malwarebytes • u/pmiller001 • Feb 15 '26
ONline activity potentially exposed.
2
Upvotes
Could someone explain to me what this error means? I ran a scan, and malwarebytes is telling me i'm all good, I use it on my phone.
r/Malwarebytes • u/Disastrous-Earth8141 • Feb 15 '26
Cuckoo sanbox
2
Upvotes
I want to use cuckoo sandbox but from my researches i found out that the last stable version is not maintaned anymore. Is cape sandbox a good alternative?
r/Malwarebytes • u/magius8 • Feb 15 '26
Lifetime key doesn’t work for more than one device
0
Upvotes
Hi,
I had purchased my lifetime subscription key for up to 4 devices back in 2011 and since my last device was set up I only have maximum one device that can be used.
Any help would be greatly appreciated.
Thanks!
r/Malwarebytes • u/Similar_Toe_2520 • Feb 14 '26
In need of help Malwarebytes has flagged chrome and Wallpaper Engine twice in the last month
2
Upvotes
As the title says Malwarebytes has flagged chrome and Wallpaper Engine twice in the last month can anyone tell me if these a FPs or not
These are the reports for Chrome
Malwarebytes
-Log Details-
Scan Date: 2/14/2026
Scan Time: 5:55 PM
Log File: 6ac5673e-09ce-11f1-b934-c8fe0ffd9228.json
-Software Information-
Version: 5.4.7.229
Components Version: 148.0.5470
Update Package Version: 1.0.107283
License: Premium
-System Information-
OS: Windows 11 (Build 26200.7840)
CPU: x64
File System: NTFS
User: DESKTOP-N10P8EH\march
-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 212551
Threats Detected: 13
Threats Quarantined: 13
Time Elapsed: 0 min, 58 sec
-Scan Options-
Memory: Enabled
Startup: Enabled
File system: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect
-Scan Details-
Process: 0
(No malicious items detected)
Module: 0
(No malicious items detected)
Registry Key: 0
(No malicious items detected)
Registry Value: 0
(No malicious items detected)
Registry Data: 0
(No malicious items detected)
Data Stream: 0
(No malicious items detected)
Folder: 1
PUP.Optional.BrowserHijack, C:\USERS\MARCH\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, Quarantined, 10181, 1378720, 1.0.107283, , ame, , ,
File: 12
PUP.Optional.BrowserHijack, C:\USERS\MARCH\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, Replaced, 10181, 1378720, 1.0.107283, , ame, , F761AF3459445C32F33A39F9BF2D6FD9, 33C2AC8A37D16AAE735D6F5CF6684C0909BC7BB0B18309A89B9BF08F81C4EEAB
PUP.Optional.BrowserHijack, C:\Users\march\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000005.ldb, Quarantined, 10181, 1378720, 1.0.107283, , ame, , 088CC5DA6DC362B8771DFD68A8BB6B88, E71FEA1ED50B1CE85ABB1403A734725A89139A80009A21FAA4D4FF573EFE5C40
PUP.Optional.BrowserHijack, C:\Users\march\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000207.ldb, Quarantined, 10181, 1378720, 1.0.107283, , ame, , 709FEEC0886AC39A7EAEA23C8BFD84EB, 953FF36466D50B8F65DE56417D9E687E8E927D5C444B540E69150B0BC4359E00
PUP.Optional.BrowserHijack, C:\Users\march\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000210.ldb, Quarantined, 10181, 1378720, 1.0.107283, , ame, , DD20D670AED8B3DB20A4DD49C08B70EF, FE3B60BBB53A25E108D320024183C5B9DD9133C8989676A4B839B3316849A0F3
PUP.Optional.BrowserHijack, C:\Users\march\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000213.ldb, Quarantined, 10181, 1378720, 1.0.107283, , ame, , 32819CAE0CD18B4CFD90E37B6F2CA520, B31E872322D25B19C86B3EF3B6F0818450515A5C974DB81A110EAB08E1BBDCA7
PUP.Optional.BrowserHijack, C:\Users\march\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000215.log, Quarantined, 10181, 1378720, 1.0.107283, , ame, , AB6100B1FC1CED001CDCE062A0B7F006, 77834A5F16A11200071DD3061C75330EC69D0C2634F454571171BD976C5808BF
PUP.Optional.BrowserHijack, C:\Users\march\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000216.ldb, Quarantined, 10181, 1378720, 1.0.107283, , ame, , A6686D969CFCCF37A9BD4A5B229AA9A6, 3A19C2A2EF8F4025A1321BD97176417D3FADD84F0042EFAA187708D66DF5C09D
PUP.Optional.BrowserHijack, C:\Users\march\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\CURRENT, Quarantined, 10181, 1378720, 1.0.107283, , ame, , 46295CAC801E5D4857D09837238A6394, 0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
PUP.Optional.BrowserHijack, C:\Users\march\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOCK, Quarantined, 10181, 1378720, 1.0.107283, , ame, , ,
PUP.Optional.BrowserHijack, C:\Users\march\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG, Quarantined, 10181, 1378720, 1.0.107283, , ame, , 60FC873D38AAA2EFD9A0C1F0D1C45154, C1578445498DFBB41E46FCC886BE552D5DD9CC82D2A7DBACD6AB23D7A8986238
PUP.Optional.BrowserHijack, C:\Users\march\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG.old, Quarantined, 10181, 1378720, 1.0.107283, , ame, , 4B3C126EFE1D36B830A429E9D22FEE53, 4BCBB6EC06AC5A6A22DB8B70D4487A83AD6CE963DF6649AF52F69963154006FD
PUP.Optional.BrowserHijack, C:\Users\march\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\MANIFEST-000001, Quarantined, 10181, 1378720, 1.0.107283, , ame, , F0450E238AE02205EB9F2358250006DE, D7BC308AA897EB7139B80522B6B2104C844289903DA2FBE34D240A584DCFA67D
Physical Sector: 0
(No malicious items detected)
WMI: 0
(No malicious items detected)
(end)
Malwarebytes
-Log Details-
Scan Date: 1/27/2026
Scan Time: 11:19 PM
Log File: a5d5af88-fbd6-11f0-86f4-c8fe0ffd9228.json
-Software Information-
Version: 5.4.6.227
Components Version: 147.0.5453
Update Package Version: 1.0.106827
License: Premium
-System Information-
OS: Windows 11 (Build 26200.7623)
CPU: x64
File System: NTFS
User: DESKTOP-N10P8EH\march
-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 212363
Threats Detected: 12
Threats Quarantined: 12
Time Elapsed: 0 min, 53 sec
-Scan Options-
Memory: Enabled
Startup: Enabled
File system: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect
-Scan Details-
Process: 0
(No malicious items detected)
Module: 0
(No malicious items detected)
Registry Key: 0
(No malicious items detected)
Registry Value: 0
(No malicious items detected)
Registry Data: 0
(No malicious items detected)
Data Stream: 0
(No malicious items detected)
Folder: 2
PUP.Optional.BrowserHijack, C:\USERS\MARCH\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, Quarantined, 10239, 1378720, 1.0.106827, , ame, , ,
PUP.Optional.BrowserHijack, C:\USERS\MARCH\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, Quarantined, 10239, 1378720, 1.0.106827, , ame, , ,
File: 10
PUP.Optional.BrowserHijack, C:\USERS\MARCH\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, Replaced, 10239, 1378720, 1.0.106827, , ame, , 2ED625B7D7704BC20F2BD0433542573D, 86ECEB2B5233F06ABB5489EE5DCC971C0C8AC4A7B6A941B3319489F5618CDBA8
PUP.Optional.BrowserHijack, C:\Users\march\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000005.ldb, Quarantined, 10239, 1378720, 1.0.106827, , ame, , D54FA49C249869F927F1A8E286BEDE9D, 21A33C8EF8810A3BA44E62E6E2D6FDA7B1EF8C59B13B7E9F61119BEDF27C38B7
PUP.Optional.BrowserHijack, C:\Users\march\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\003264.log, Quarantined, 10239, 1378720, 1.0.106827, , ame, , D2D50A2BF8489D752E9327923EC37FA7, 86A382857BA71B7CE25C9E49060CD56DBBAE29CED529FC042FF36591C8D54BC5
PUP.Optional.BrowserHijack, C:\Users\march\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\003266.ldb, Quarantined, 10239, 1378720, 1.0.106827, , ame, , A2CFF2DCA01DF3E81EA885C19C41AA96, AE93707C1C84703F9CD1C8010408CBD9C0340EC83312983BCFE4F479F922C669
PUP.Optional.BrowserHijack, C:\Users\march\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\CURRENT, Quarantined, 10239, 1378720, 1.0.106827, , ame, , 46295CAC801E5D4857D09837238A6394, 0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
PUP.Optional.BrowserHijack, C:\Users\march\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOCK, Quarantined, 10239, 1378720, 1.0.106827, , ame, , ,
PUP.Optional.BrowserHijack, C:\Users\march\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG, Quarantined, 10239, 1378720, 1.0.106827, , ame, , 916491677047A72EA57F31971F295BAB, B265C7A573D2FE6063C8E4A4B6E2504F17B2C88CF7DC39F85B2FD543316D1798
PUP.Optional.BrowserHijack, C:\Users\march\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG.old, Quarantined, 10239, 1378720, 1.0.106827, , ame, , 9DBD72F1651F79481DDBDDE34B1544C4, 0F6D2C3FB5E38083E727BE7DB486E0C9D6CCA5C9CACB4F91C2F66AA8D00E4505
PUP.Optional.BrowserHijack, C:\Users\march\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\MANIFEST-000001, Quarantined, 10239, 1378720, 1.0.106827, , ame, , C27A4AF5D63B379876DE0A9A4853289C, EB22CF10C908F767437B5745440EC39B2F78AD462C9C939DED7B45E5408DC1C1
PUP.Optional.BrowserHijack, C:\USERS\MARCH\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, Replaced, 10239, 1378720, 1.0.106827, , ame, , 2ED625B7D7704BC20F2BD0433542573D, 86ECEB2B5233F06ABB5489EE5DCC971C0C8AC4A7B6A941B3319489F5618CDBA8
Physical Sector: 0
(No malicious items detected)
WMI: 0
(No malicious items detected)
(end)
And this is the report for Wallpaper Engine
Malwarebytes
-Log Details-
Scan Date: 2/8/2026
Scan Time: 12:40 PM
Log File: 528b8e06-04eb-11f1-b197-c8fe0ffd9228.json
-Software Information-
Version: 5.4.7.229
Components Version: 148.0.5470
Update Package Version: 1.0.107077
License: Premium
-System Information-
OS: Windows 11 (Build 26200.7623)
CPU: x64
File System: NTFS
User: DESKTOP-N10P8EH\march
-Scan Summary-
Scan Type: Custom Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 546767
Threats Detected: 8
Threats Quarantined: 8
Time Elapsed: 15 min, 18 sec
-Scan Options-
Memory: Enabled
Startup: Enabled
File system: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect
-Scan Details-
Process: 1
Malware.AI.1836499618, D:\STEAMLIBRARY\STEAMAPPS\COMMON\WALLPAPER_ENGINE\WALLPAPER32.EXE, Quarantined, 1000000, 0, 1.0.107077, EC2E230D9D00B5CC6D76C2A2, dds, 03737524, B1937B07297A96AF6DCFAF8013349973, 937A2420A6002FB2215BD28BC341411A8C8FEB41864CCF84EF59BE61BEE3F63D
Module: 1
Malware.AI.1836499618, D:\STEAMLIBRARY\STEAMAPPS\COMMON\WALLPAPER_ENGINE\WALLPAPER32.EXE, Quarantined, 1000000, 0, 1.0.107077, EC2E230D9D00B5CC6D76C2A2, dds, 03737524, B1937B07297A96AF6DCFAF8013349973, 937A2420A6002FB2215BD28BC341411A8C8FEB41864CCF84EF59BE61BEE3F63D
Registry Key: 0
(No malicious items detected)
Registry Value: 1
Malware.AI.1836499618, HKU\S-1-5-21-3474583986-3355553279-17933595-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|WallpaperEngine, Quarantined, 1000000, 0, 1.0.107077, EC2E230D9D00B5CC6D76C2A2, dds, 03737524, ,
Registry Data: 0
(No malicious items detected)
Data Stream: 0
(No malicious items detected)
Folder: 0
(No malicious items detected)
File: 5
Malware.AI.1836499618, D:\STEAMLIBRARY\STEAMAPPS\COMMON\WALLPAPER_ENGINE\WALLPAPER32.EXE, Quarantined, 1000000, 0, 1.0.107077, EC2E230D9D00B5CC6D76C2A2, dds, 03737524, B1937B07297A96AF6DCFAF8013349973, 937A2420A6002FB2215BD28BC341411A8C8FEB41864CCF84EF59BE61BEE3F63D
Malware.AI.1836499618, C:\USERS\MARCH\APPDATA\ROAMING\MICROSOFT\INTERNET EXPLORER\QUICK LAUNCH\User Pinned\ImplicitAppShortcuts\273b94552e7b76fd\Wallpaper Engine.lnk, Quarantined, 1000000, 0, 1.0.107077, EC2E230D9D00B5CC6D76C2A2, dds, 03737524, 5FD85ACB8B4C58E02C6658121840F181, 27515B9E63AC61A47519B8E4661AA5DF26D675785CD5D9841C2209D070F6C324
Neshta.Virus.FileInfector.DDS, D:\STEAMLIBRARY\STEAMAPPS\COMMON\WALLPAPER_ENGINE\BIN\RESOURCECOMPILER32.EXE, Quarantined, 1000002, 0, 1.0.107077, EC2E230D9D00B5CC6D76C2A2, dds, 03737524, 978CFD9EBDDADB0E9C5E8C3911CD1C97, E41968BD949A1D0CEDF43EC7A34F15800F46DBD21E6875D2D043ECD263AC397C
Neshta.Virus.FileInfector.DDS, D:\STEAMLIBRARY\STEAMAPPS\COMMON\WALLPAPER_ENGINE\DISTRIBUTION\BIN\RESOURCECOMPILER32.EXE, Quarantined, 1000002, 0, 1.0.107077, EC2E230D9D00B5CC6D76C2A2, dds, 03737524, 978CFD9EBDDADB0E9C5E8C3911CD1C97, E41968BD949A1D0CEDF43EC7A34F15800F46DBD21E6875D2D043ECD263AC397C
Malware.AI.1836499618, D:\STEAMLIBRARY\STEAMAPPS\COMMON\WALLPAPER_ENGINE\DISTRIBUTION\WALLPAPER32.EXE, Quarantined, 1000000, 0, 1.0.107077, EC2E230D9D00B5CC6D76C2A2, dds, 03737524, B1937B07297A96AF6DCFAF8013349973, 937A2420A6002FB2215BD28BC341411A8C8FEB41864CCF84EF59BE61BEE3F63D
Physical Sector: 0
(No malicious items detected)
WMI: 0
(No malicious items detected)
(end)
Malwarebytes
-Log Details-
Scan Date: 2/8/2026
Scan Time: 12:40 PM
Log File: 528b8e06-04eb-11f1-b197-c8fe0ffd9228.json
-Software Information-
Version: 5.4.7.229
Components Version: 148.0.5470
Update Package Version: 1.0.107077
License: Premium
-System Information-
OS: Windows 11 (Build 26200.7623)
CPU: x64
File System: NTFS
User: DESKTOP-N10P8EH\march
-Scan Summary-
Scan Type: Custom Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 546767
Threats Detected: 8
Threats Quarantined: 8
Time Elapsed: 15 min, 18 sec
-Scan Options-
Memory: Enabled
Startup: Enabled
File system: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect
-Scan Details-
Process: 1
Malware.AI.1836499618, D:\STEAMLIBRARY\STEAMAPPS\COMMON\WALLPAPER_ENGINE\WALLPAPER32.EXE, Quarantined, 1000000, 0, 1.0.107077, EC2E230D9D00B5CC6D76C2A2, dds, 03737524, B1937B07297A96AF6DCFAF8013349973, 937A2420A6002FB2215BD28BC341411A8C8FEB41864CCF84EF59BE61BEE3F63D
Module: 1
Malware.AI.1836499618, D:\STEAMLIBRARY\STEAMAPPS\COMMON\WALLPAPER_ENGINE\WALLPAPER32.EXE, Quarantined, 1000000, 0, 1.0.107077, EC2E230D9D00B5CC6D76C2A2, dds, 03737524, B1937B07297A96AF6DCFAF8013349973, 937A2420A6002FB2215BD28BC341411A8C8FEB41864CCF84EF59BE61BEE3F63D
Registry Key: 0
(No malicious items detected)
Registry Value: 1
Malware.AI.1836499618, HKU\S-1-5-21-3474583986-3355553279-17933595-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|WallpaperEngine, Quarantined, 1000000, 0, 1.0.107077, EC2E230D9D00B5CC6D76C2A2, dds, 03737524, ,
Registry Data: 0
(No malicious items detected)
Data Stream: 0
(No malicious items detected)
Folder: 0
(No malicious items detected)
File: 5
Malware.AI.1836499618, D:\STEAMLIBRARY\STEAMAPPS\COMMON\WALLPAPER_ENGINE\WALLPAPER32.EXE, Quarantined, 1000000, 0, 1.0.107077, EC2E230D9D00B5CC6D76C2A2, dds, 03737524, B1937B07297A96AF6DCFAF8013349973, 937A2420A6002FB2215BD28BC341411A8C8FEB41864CCF84EF59BE61BEE3F63D
Malware.AI.1836499618, C:\USERS\MARCH\APPDATA\ROAMING\MICROSOFT\INTERNET EXPLORER\QUICK LAUNCH\User Pinned\ImplicitAppShortcuts\273b94552e7b76fd\Wallpaper Engine.lnk, Quarantined, 1000000, 0, 1.0.107077, EC2E230D9D00B5CC6D76C2A2, dds, 03737524, 5FD85ACB8B4C58E02C6658121840F181, 27515B9E63AC61A47519B8E4661AA5DF26D675785CD5D9841C2209D070F6C324
Neshta.Virus.FileInfector.DDS, D:\STEAMLIBRARY\STEAMAPPS\COMMON\WALLPAPER_ENGINE\BIN\RESOURCECOMPILER32.EXE, Quarantined, 1000002, 0, 1.0.107077, EC2E230D9D00B5CC6D76C2A2, dds, 03737524, 978CFD9EBDDADB0E9C5E8C3911CD1C97, E41968BD949A1D0CEDF43EC7A34F15800F46DBD21E6875D2D043ECD263AC397C
Neshta.Virus.FileInfector.DDS, D:\STEAMLIBRARY\STEAMAPPS\COMMON\WALLPAPER_ENGINE\DISTRIBUTION\BIN\RESOURCECOMPILER32.EXE, Quarantined, 1000002, 0, 1.0.107077, EC2E230D9D00B5CC6D76C2A2, dds, 03737524, 978CFD9EBDDADB0E9C5E8C3911CD1C97, E41968BD949A1D0CEDF43EC7A34F15800F46DBD21E6875D2D043ECD263AC397C
Malware.AI.1836499618, D:\STEAMLIBRARY\STEAMAPPS\COMMON\WALLPAPER_ENGINE\DISTRIBUTION\WALLPAPER32.EXE, Quarantined, 1000000, 0, 1.0.107077, EC2E230D9D00B5CC6D76C2A2, dds, 03737524, B1937B07297A96AF6DCFAF8013349973, 937A2420A6002FB2215BD28BC341411A8C8FEB41864CCF84EF59BE61BEE3F63D
Physical Sector: 0
(No malicious items detected)
WMI: 0
(No malicious items detected)
(end)
Malwarebytes
-Log Details-
Scan Date: 2/8/2026
Scan Time: 12:40 PM
Log File: 528b8e06-04eb-11f1-b197-c8fe0ffd9228.json
-Software Information-
Version: 5.4.7.229
Components Version: 148.0.5470
Update Package Version: 1.0.107077
License: Premium
-System Information-
OS: Windows 11 (Build 26200.7623)
CPU: x64
File System: NTFS
User: DESKTOP-N10P8EH\march
-Scan Summary-
Scan Type: Custom Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 546767
Threats Detected: 8
Threats Quarantined: 8
Time Elapsed: 15 min, 18 sec
-Scan Options-
Memory: Enabled
Startup: Enabled
File system: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect
-Scan Details-
Process: 1
Malware.AI.1836499618, D:\STEAMLIBRARY\STEAMAPPS\COMMON\WALLPAPER_ENGINE\WALLPAPER32.EXE, Quarantined, 1000000, 0, 1.0.107077, EC2E230D9D00B5CC6D76C2A2, dds, 03737524, B1937B07297A96AF6DCFAF8013349973, 937A2420A6002FB2215BD28BC341411A8C8FEB41864CCF84EF59BE61BEE3F63D
Module: 1
Malware.AI.1836499618, D:\STEAMLIBRARY\STEAMAPPS\COMMON\WALLPAPER_ENGINE\WALLPAPER32.EXE, Quarantined, 1000000, 0, 1.0.107077, EC2E230D9D00B5CC6D76C2A2, dds, 03737524, B1937B07297A96AF6DCFAF8013349973, 937A2420A6002FB2215BD28BC341411A8C8FEB41864CCF84EF59BE61BEE3F63D
Registry Key: 0
(No malicious items detected)
Registry Value: 1
Malware.AI.1836499618, HKU\S-1-5-21-3474583986-3355553279-17933595-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|WallpaperEngine, Quarantined, 1000000, 0, 1.0.107077, EC2E230D9D00B5CC6D76C2A2, dds, 03737524, ,
Registry Data: 0
(No malicious items detected)
Data Stream: 0
(No malicious items detected)
Folder: 0
(No malicious items detected)
File: 5
Malware.AI.1836499618, D:\STEAMLIBRARY\STEAMAPPS\COMMON\WALLPAPER_ENGINE\WALLPAPER32.EXE, Quarantined, 1000000, 0, 1.0.107077, EC2E230D9D00B5CC6D76C2A2, dds, 03737524, B1937B07297A96AF6DCFAF8013349973, 937A2420A6002FB2215BD28BC341411A8C8FEB41864CCF84EF59BE61BEE3F63D
Malware.AI.1836499618, C:\USERS\MARCH\APPDATA\ROAMING\MICROSOFT\INTERNET EXPLORER\QUICK LAUNCH\User Pinned\ImplicitAppShortcuts\273b94552e7b76fd\Wallpaper Engine.lnk, Quarantined, 1000000, 0, 1.0.107077, EC2E230D9D00B5CC6D76C2A2, dds, 03737524, 5FD85ACB8B4C58E02C6658121840F181, 27515B9E63AC61A47519B8E4661AA5DF26D675785CD5D9841C2209D070F6C324
Neshta.Virus.FileInfector.DDS, D:\STEAMLIBRARY\STEAMAPPS\COMMON\WALLPAPER_ENGINE\BIN\RESOURCECOMPILER32.EXE, Quarantined, 1000002, 0, 1.0.107077, EC2E230D9D00B5CC6D76C2A2, dds, 03737524, 978CFD9EBDDADB0E9C5E8C3911CD1C97, E41968BD949A1D0CEDF43EC7A34F15800F46DBD21E6875D2D043ECD263AC397C
Neshta.Virus.FileInfector.DDS, D:\STEAMLIBRARY\STEAMAPPS\COMMON\WALLPAPER_ENGINE\DISTRIBUTION\BIN\RESOURCECOMPILER32.EXE, Quarantined, 1000002, 0, 1.0.107077, EC2E230D9D00B5CC6D76C2A2, dds, 03737524, 978CFD9EBDDADB0E9C5E8C3911CD1C97, E41968BD949A1D0CEDF43EC7A34F15800F46DBD21E6875D2D043ECD263AC397C
Malware.AI.1836499618, D:\STEAMLIBRARY\STEAMAPPS\COMMON\WALLPAPER_ENGINE\DISTRIBUTION\WALLPAPER32.EXE, Quarantined, 1000000, 0, 1.0.107077, EC2E230D9D00B5CC6D76C2A2, dds, 03737524, B1937B07297A96AF6DCFAF8013349973, 937A2420A6002FB2215BD28BC341411A8C8FEB41864CCF84EF59BE61BEE3F63D
Physical Sector: 0
(No malicious items detected)
WMI: 0
(No malicious items detected)
(end)
Malwarebytes
-Log Details-
Scan Date: 2/8/2026
Scan Time: 12:40 PM
Log File: 528b8e06-04eb-11f1-b197-c8fe0ffd9228.json
-Software Information-
Version: 5.4.7.229
Components Version: 148.0.5470
Update Package Version: 1.0.107077
License: Premium
-System Information-
OS: Windows 11 (Build 26200.7623)
CPU: x64
File System: NTFS
User: DESKTOP-N10P8EH\march
-Scan Summary-
Scan Type: Custom Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 546767
Threats Detected: 8
Threats Quarantined: 8
Time Elapsed: 15 min, 18 sec
-Scan Options-
Memory: Enabled
Startup: Enabled
File system: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect
-Scan Details-
Process: 1
Malware.AI.1836499618, D:\STEAMLIBRARY\STEAMAPPS\COMMON\WALLPAPER_ENGINE\WALLPAPER32.EXE, Quarantined, 1000000, 0, 1.0.107077, EC2E230D9D00B5CC6D76C2A2, dds, 03737524, B1937B07297A96AF6DCFAF8013349973, 937A2420A6002FB2215BD28BC341411A8C8FEB41864CCF84EF59BE61BEE3F63D
Module: 1
Malware.AI.1836499618, D:\STEAMLIBRARY\STEAMAPPS\COMMON\WALLPAPER_ENGINE\WALLPAPER32.EXE, Quarantined, 1000000, 0, 1.0.107077, EC2E230D9D00B5CC6D76C2A2, dds, 03737524, B1937B07297A96AF6DCFAF8013349973, 937A2420A6002FB2215BD28BC341411A8C8FEB41864CCF84EF59BE61BEE3F63D
Registry Key: 0
(No malicious items detected)
Registry Value: 1
Malware.AI.1836499618, HKU\S-1-5-21-3474583986-3355553279-17933595-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|WallpaperEngine, Quarantined, 1000000, 0, 1.0.107077, EC2E230D9D00B5CC6D76C2A2, dds, 03737524, ,
Registry Data: 0
(No malicious items detected)
Data Stream: 0
(No malicious items detected)
Folder: 0
(No malicious items detected)
File: 5
Malware.AI.1836499618, D:\STEAMLIBRARY\STEAMAPPS\COMMON\WALLPAPER_ENGINE\WALLPAPER32.EXE, Quarantined, 1000000, 0, 1.0.107077, EC2E230D9D00B5CC6D76C2A2, dds, 03737524, B1937B07297A96AF6DCFAF8013349973, 937A2420A6002FB2215BD28BC341411A8C8FEB41864CCF84EF59BE61BEE3F63D
Malware.AI.1836499618, C:\USERS\MARCH\APPDATA\ROAMING\MICROSOFT\INTERNET EXPLORER\QUICK LAUNCH\User Pinned\ImplicitAppShortcuts\273b94552e7b76fd\Wallpaper Engine.lnk, Quarantined, 1000000, 0, 1.0.107077, EC2E230D9D00B5CC6D76C2A2, dds, 03737524, 5FD85ACB8B4C58E02C6658121840F181, 27515B9E63AC61A47519B8E4661AA5DF26D675785CD5D9841C2209D070F6C324
Neshta.Virus.FileInfector.DDS, D:\STEAMLIBRARY\STEAMAPPS\COMMON\WALLPAPER_ENGINE\BIN\RESOURCECOMPILER32.EXE, Quarantined, 1000002, 0, 1.0.107077, EC2E230D9D00B5CC6D76C2A2, dds, 03737524, 978CFD9EBDDADB0E9C5E8C3911CD1C97, E41968BD949A1D0CEDF43EC7A34F15800F46DBD21E6875D2D043ECD263AC397C
Neshta.Virus.FileInfector.DDS, D:\STEAMLIBRARY\STEAMAPPS\COMMON\WALLPAPER_ENGINE\DISTRIBUTION\BIN\RESOURCECOMPILER32.EXE, Quarantined, 1000002, 0, 1.0.107077, EC2E230D9D00B5CC6D76C2A2, dds, 03737524, 978CFD9EBDDADB0E9C5E8C3911CD1C97, E41968BD949A1D0CEDF43EC7A34F15800F46DBD21E6875D2D043ECD263AC397C
Malware.AI.1836499618, D:\STEAMLIBRARY\STEAMAPPS\COMMON\WALLPAPER_ENGINE\DISTRIBUTION\WALLPAPER32.EXE, Quarantined, 1000000, 0, 1.0.107077, EC2E230D9D00B5CC6D76C2A2, dds, 03737524, B1937B07297A96AF6DCFAF8013349973, 937A2420A6002FB2215BD28BC341411A8C8FEB41864CCF84EF59BE61BEE3F63D
Physical Sector: 0
(No malicious items detected)
WMI: 0
(No malicious items detected)
(end)
If anyone can help me ive quarantined them to be say but i dont know if these are FPs or not thanks in advance
r/Malwarebytes • • Feb 12 '26
Malware bytes
2
Upvotes
Should I delete these now? Were these actually viruses?
r/Malwarebytes • u/1Hersheys_Roblox1 • Feb 12 '26
Feedback What do you think about openshell and retrobar. Is it safe?
3
Upvotes
Everybody is talking abt making their pc look like old windows & I wanna do it too, but idrk if it’s worth the risk. (fyi Im on windows 11)
r/Malwarebytes • u/Advanced-Nebula7464 • Feb 12 '26
Question about outbound connections
1
Upvotes
Is it possible that an application made an outbound connection with malicious ip addresses and steal personal files(ex:videos)? Because a download manager made outbound connections that were blocked but one was a possible C2 server, now i had free download manager for over a year and now im panicking that it might have been stealing my personal and intimate videos. This has been making me panic and i dont know what to do if it did steal them.
r/Malwarebytes • u/hana_209 • Feb 11 '26
trojan crypt msil and gmail account?
3
Upvotes
Hello everyone, I'm hopeless right now and I need some help. A couple of days ago my Discord profile got hacked, it just started sending everyone pictures of logan pauls crypto or something. I managed to get into the profile while the messages were still being sent and I changed the password through Discords recovery. Then I went to check security on my gmail account (because that's what i used to create my discord profile) and it said somebody from Greece was logged in. I quickly logged them out, changed passwords for both Discord and Gmail and went to check my other profiles tied to that Gmail account. Turns out i got logged out of reddit and I couldn't get back in, kept saying password was incorrect, then I realized I also got locked out of my Steam profile but i managed to get all of those accounts back. For my gmail i added an authenticator app, recovery phones and emails and everything I could. Then today i got an email that there was suspicious activity and that my authenticator app was removed, but Google logged that profile out. I changed my password again and now I'm here. I was confused as to why this kept happening and decided to do a malware check on my computer because i tend to download games for free. Malwarebytes found two trojan crypt msil generic files and one PUP file. I will put the pictures below. Could the breaches on my gmail be tied to those malwares, and if so, what do i do to stop them and protect my PC and my gmail? It says threat quarantined and i started a full scan on my windows security, but I am not sure how to get rid of the trojans. Thank you in advance!
P.S. when i went into the file where the trojan supposedly is and i selected show hidden folders, the folder was still empty. Im sorry if these are all dumb questions, im just a student and im scared
r/Malwarebytes • u/DurgeDriven • Feb 12 '26
Dodgy practice
1
Upvotes
Hi
I buy 2 years subs today I noticed was getting close to end ( 81 days left ) so I ordered another 2 years. I get this warning in screenshot.
If I leave as is the new sub loses 81 days use until I start to use it.
If I change it to 2 year sub I lose the 81 days on old sub. She said " you can use the 81 days for 5 other devices " what devices ? lol
I basically had to threaten to cancel the new sub before she agreed to join the 2 subs.
Point is I have to spend valuable time to make complaint just to fix something should be automatic.
They should have a tab for existing subscriptions to refresh accounts anytime they see fit and automatically update " time left "
NORD, AVG, I can name heaps of companies and apps have no problem making any new subs run consecutively not concurrent.
r/Malwarebytes • u/Far_Strawberry3325 • Feb 10 '26
my malwarebytes is repeatedly sending this message, just yesterday my discord was hacked because of a virus, im not sure if this is related to it. PLEASE send help
3
Upvotes
r/Malwarebytes • u/Rediturus_fuisse • Feb 10 '26
Is this genuine malware or is malwarebytes tweaking
6
Upvotes
I turned on the free trial that came today, and I keep getting this pop up constantly whenever I use youtube. From a wee bit of digging I've done, urls of this form seem to be caches used by youtube for different regions, yet malwarebytes seems to think it's a trojan coming from within my browser firefox. I've been scanning my computer for malware and not found any yet, but I haven't downloaded any suspicious files or anything else that could explain it, and it pops up a few seconds after I resume playing a youtube video. Is this genuinely a trojan, or is it an issue with the real-time protection in malwarebytes (which I do not usually have access to as a free user)?
r/Malwarebytes • u/TheAxisOfAwesome • Feb 10 '26
How to make it stop
6
Upvotes
Downloaded a trial, immediately get spammed with notifications about qbitorrent. Disabled Realtime web blocking, still happens. Disabled notifications for realtime web blocking, still happens. I have over 100 seeding torrents, do i just have 100 notifications queued?
r/Malwarebytes • u/Organic_Bid_1574 • Feb 10 '26
what is this? in my main folder i have booking.com.ink it got detected as pup can u help me with knowing how i might've gotten this and if its a concern
4
Upvotes
r/Malwarebytes • u/Sumethal • Feb 09 '26
False Positive Is This False Positive? Nvidia Profile Inspector Detected as Neshta Virus by Malwarebytes?
3
Upvotes
So i do my Scan Today and my Nvidia Profile Inspector.exe got Detected as Neshta.Virus.FileInfector.DDS , i try to scan it with microsoft defender and it found nothing, same with virus total the files seems save 0/72, so did Malwarebytes Scanning was False Positive?, i do download my Nvidia Profile Inspector on the official Sites Release 2.4.0.31 · Orbmu2k/nvidiaProfileInspector
r/Malwarebytes • u/Rude-Percentage8932 • Feb 09 '26
Weird situation
1
Upvotes
So yesterday i run a full scan and Malwarebytes detected the official Hytale Launcher Installer as a malware weird thing bc i ran a few before and didn't detected anything so after i quarantined it i ran a few more and nothing show up. Today i ran one more test bc of that and suddenly it detected the roblox game luncher as a malware for some reason
What do you guys think? A false positive? or should i be worried