What is this? (mpspy test file)

[Bill Sanderson]

This item (see the threat name) was detected on my system during a full
scan.

A test file sounds like a great idea--but where did it come from? Was it
placed as part of the last definition update? I've quarantined it so that I
can re-use it.
---------------------------------------------------------------------------------

Event Type: Warning
Event Source: WinDefend
Event Category: None
Event ID: 1006
Date: 3/18/2006
Time: 1:07:09 PM
User: N/A
Computer: BILL
Description:
Windows Defender scan has detected potential malware.
For more information please see the following:
http://www.microsoft.com
Scan ID: {A8838A0A-3AC7-45AF-AA69-6E23820FFF20}
Scan Type: AntiSpyware
Scan Parameters: Full Scan
User: NT AUTHORITY\NETWORK SERVICE
Threat Name: MPSpyTestFile
Threat Id: 2147483645
Threat Severity: 5
Threat Category: 2
Path Found: file:E:\Documents and Settings\windowsdefender\Local
Settings\Temporary Internet Files\Content.IE5\ZX5SLSQU\spy[1].exe
Detection Type: Signatures


For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


--

 

[Bill Sanderson]

Whoops--false alarm.

Please disregard this message, folks--I realize now that from the date and
the location of this file, it is likely something used by technicians doing
some specific testing on my system--this isn't something the public at large
is likely to see.

 

[Guest]

Too bad. A test file might be a good idea.

 

[Bill Sanderson]

I've just learned that a third party is planning to create such a file:

http://www.computerworld.com/securitytopics/security/story/0,10801,109684,00.html?source=x06

I like this idea.

--