Hi,

Assume a window machine that did network scans on a specific port.
Multiple AV wear run on the machine and turned out nothing.
How would you prove/disprove that machine is infected?

Sin-cerely,
Trol