UPX is a free packer. it was used to pack some cheap trojans... AutoIt uses also UPX as a packer.. now some sucky antivirus spot anything packed with UPX as positive...Quote:
Pirox does have a pretty big name to uphold. I believe Autoit quite often produces false positives when it uses the #include <Misc.au3> But other than that, still maintain caution with passwords & monitoring additional processes.
doesn't matter what the code does
but this one isn't packed with UPX as it looks ^^; still digging