not malwares, I meant some "safe" apps which are probably injected some malicious codes. VS shows some VT detections but I'm not sure about their safety
I'm still a bit confused but injecting code is malicious, the exception is when it's done for a non-malicious purpose (e.g. AV software do it but not to harm you, but for the opposite purpose). Code injection can lead to data theft too, since then the information within text controls can be stolen (for example).
But no problem because you said you use a VM now anyway so it's ok if I misunderstood