HDD GURU FORUMS

Hello all,

I uploaded HDDRawCopy1.10Portable to virustotal and it says it contains a known ransomware Trojan.

Anyone test any of the other executables found on this site?

-Joe

I think it's just a false positive. Probably something in how it's coded that makes it appear "virusy".

Upload the EXE to https://www.virustotal.com/

fzabkar wrote:Upload the EXE to https://www.virustotal.com/

Sorry, I see you have already done that.

Its a false positive.

unusual though to specify Ransomware. usually these sorts of applications that get deep into the system will either flag on the protector/packer the author uses on the .exe, or will pop because of the low level access.

Possible that another Ransomware uses the same "something" as the tool, might be a good idea to check in depth before whitelisting.