HDDRawCopy1.10Portable contains Trojan?

[JoeHdd]

Hello all,

I uploaded HDDRawCopy1.10Portable to virustotal and it says it contains a known ransomware Trojan.

Anyone test any of the other executables found on this site?

-Joe

[data-medics]

I think it's just a false positive. Probably something in how it's coded that makes it appear "virusy".

[fzabkar]

Upload the EXE to https://www.virustotal.com/

[fzabkar]

Upload the EXE to https://www.virustotal.com/

Sorry, I see you have already done that.

[visz]

Its a false positive.

[HaQue]

unusual though to specify Ransomware. usually these sorts of applications that get deep into the system will either flag on the protector/packer the author uses on the .exe, or will pop because of the low level access.

Possible that another Ransomware uses the same "something" as the tool, might be a good idea to check in depth before whitelisting.