Windows 10 Recovery Tools - Bootable Rescue Disk

When I boot windows pe, I scan with malwarebytes new version, detect PUP in partition X:

????

Malwarebytes
Free Cyber Security & Anti-Malware Software | Malwarebytes


-Log Details-
Scan Date: 4/25/18
Scan Time: 11:11 PM
Log File: 8d119864-48ff-11e8-8c18-2c4d544e0a6f.json
Administrator: Yes


-Software Information-
Version: 3.4.5.2467
Components Version: 1.0.342
Update Package Version: 1.0.4874
License: Trial


-System Information-
OS: Windows 10 (Build 14393.0)
CPU: x64
File System: NTFS
User: System


-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 115717
Threats Detected: 4
Threats Quarantined: 0
(No malicious items detected)
Time Elapsed: 1 min, 29 sec


-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Detect
PUM: Detect


-Scan Details-
Process: 1
Trojan.Downloader, X:\WINDOWS\SYSTEM32\WIND.EXE, No Action By User, [836], [205052],1.0.4874


Module: 1
Trojan.Downloader, X:\WINDOWS\SYSTEM32\WIND.EXE, No Action By User, [836], [205052],1.0.4874


Registry Key: 0
(No malicious items detected)


Registry Value: 0
(No malicious items detected)


Registry Data: 0
(No malicious items detected)


Data Stream: 0
(No malicious items detected)


Folder: 0
(No malicious items detected)


File: 2
Trojan.Downloader, X:\WINDOWS\SYSTEM32\WIND.EXE, No Action By User, [836], [205052],1.0.4874
PUP.Optional.ProductKeyFinder, X:\PROGRAM FILES\PRODUKEY\PRODUKEY.EXE, No Action By User, [12874], [86094],1.0.4874


Physical Sector: 0
(No malicious items detected)




(end)

Not sure what you finding and flagging with MBAM

windx.exe is the file that launches the Desktop in PESE

the file is not a common file. So chances are it has not been through AV testing..
So what you are getting is a false report.
Wind.exe is used for Show Desktop
PESE has been downloaded well over a million times and it is safe to run.
This rescue media and this thread would not be as popular if there was an issue.
And surely the Admins of this forum would not allow this topic, if anything about it was unsafe to the users of this forum..

Enjoy!
KYHI

Just to be sure you both are talking about the same thing....one has windx.exe and the other wind.exe

Kyhi said:

windx.exe is the file that launches the Desktop in PESE

Trojan.Downloader, X:\WINDOWS\SYSTEM32\WIND.EXE

...and

Code:

PUP.Optional.ProductKeyFinder, X:\PROGRAM FILES\PRODUKEY\PRODUKEY.EXE, No Action By User, [12874],

still popping PUP's ... LOL.