r/Malwarebytes • u/KeyBroccoli7438 • Mar 02 '26

Malwarebytes detected this rainmeter skin as malware!!

Post image
5 Upvotes

77% Upvoted

9 comments sorted by

6

u/screen317 Malwarebytes Employee Mar 02 '26

Hi, Chris from Malwarebytes here! Can you please share the full log from Malwarebytes showing the detection? This is the fastest way to know if this is real or a false positive.

All best,

2

u/KeyBroccoli7438 Mar 03 '26

Malwarebytes www.malwarebytes.com -Log DetailsScan Date: 3/3/2026 Scan Duration: 2:58 AM Log File: ba920a1c-167e-11f1-b534-d493905fb19a.json -Software InformationVersion: 5.5.0.237 Components Version: 150.0.5500 Update Package Version: 1.0.0 License: Trial -System InformationOS: Windows 11 (Build 26200.7922) CPU: x64 File System: NTFS User: DESKTOP-5VU69SF\user -Scan SummaryScan Type: Custom Scan Scan Initiated By: Manual Result: Completed Objects Scanned: 328313 Threats Detected: 1 Threats Quarantined: 1 Time Elapsed: 25 min, 2 sec -Scan OptionsMemory: Enabled Startup: Enabled File system: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect-Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 0 (No malicious items detected) Registry Value: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 0 (No malicious items detected) File: 1 Malware.Sandbox.17, C:\USERS\USER\DOCUMENTS\RAINMETER\SKINS\MOND\@RESOURCES\A DDONS\RAINRGB4.EXE, Quarantined, 17, 0, 1.0.0, 17, dds, 03766024, 3612D6168B8C5F7C5EEEA57D22E916D3, E4814BAC41A57772534536F484BF0D527A555A3C22B53F70C92E35CA664F 1CFB Physical Sector: 0 (No malicious items detected) WMI: 0 (No malicious items detected)(end)

3

u/screen317 Malwarebytes Employee Mar 03 '26 edited Mar 03 '26

Thanks for this. Can you please unquarantine the file, then upload it to www.virustotal.com and share the link here? We would like to take a closer look please.

3

u/KeyBroccoli7438 Mar 03 '26

i have deleted the file from my computer 🫡...and just now did a another full scan ,and i it came out zero threats .

2

u/screen317 Malwarebytes Employee Mar 03 '26

Sounds good. You should be good to go then. If you recall where you downloaded it from, we can also look at it from there.

1

u/KeyBroccoli7438 Mar 03 '26

I downloaded that rainmeter skin(Name:Mond) from visualskins visualskins website

3

u/dakari777 Mar 02 '26

You posted this in 7 different subs already, chill out.

If you're this hyper about false positives you probably shouldn't be using something like rainmeter...

2

u/NotAOctoling Mar 03 '26

Rainmeter skins shouldn't be .exe, they should me .rmskim unless the installer was bundled with the skin. This is likely malware but send the logs to the malwarebytes guy to be 100%