Hello I'm doing a scan on a client machine attached as an external usb on which recovery software has already been run.
Attempting to find evidence of keyloggers and remote access software that may have been installed.
Getting multiple results of Backdoor.Poison and Trojan.Upartre in a scan.
The Backdoor.Poison results when uploaded to virustotal come back saying MalwareBytes is the only one which is detecting these. Does this mean I am getting a false positive?
Was hoping there was some way I could send MalwareBytes the files to see if they are indeed malware. (apologies if this is not the correct place in the forum for this post.)
F:\icarefiles\1 NTFS\LostFiles2\drivers\OneKey_Recovery\Factory\OKR\LANGUAGE\DAN\f_001326
F:\icarefiles\1 NTFS\LostFiles2\drivers\OneKey_Recovery\Factory\OKR\LANGUAGE\DAN\f_001326_000
https://www.virustotal.com/en/file/af589b32018153525129a3ad30d01e5973b610509431f0e95b8c84401fda7eec/analysis/1468934428/
F:\icarefiles\1 NTFS\LostFiles2\drivers\OneKey_Recovery\Factory\OKR\LANGUAGE\DAN\f_0004ed
F:\icarefiles\1 NTFS\LostFiles2\drivers\OneKey_Recovery\Factory\OKR\LANGUAGE\DAN\f_0004ed_000
https://www.virustotal.com/en/file/4ade4ea5ff1ad55d11eb7ed88c9ace80585a08e648609af1d0fddaf816f7e8c5/analysis/1468933469/
Any help would be much appreciated,
Cheers