I recently tried to recover data off an old recovery file on an old external hard drive after I couldn't find what I was looking for so I did not transfer anything. The next day I find that Norton has detected Suspicious.Cloud.9
From then on out I have come across daily notifications that "Pe_rom.dll contained threat Suspicious.Cloud.9" There is a second file that contained the Trojan too but at the moment I cant find the security risk notification on it. If I find it I will let you know.
Also I know this has been associated with a falls positive but I believe this is not that.