1. Never directly run unknown even risky exe in the shared folder. For more, read this post@ MT: https://malwaretips.com/threads/can-malware-bypass-vmware.14677/
2. There ain't no such thing as "100% secure".
Yet, using a VM properly can keep 99% badware at bay.