Register a Program as NOT a Virus

[Markizano]

I installed this program called Revealer (from the site http://www.revealerkeylogger.com/)  as my own security camera on my computer, which I must admit has saved me a few times when I needed to prove that something didn't/did happen on my computer. I've had this software installed on my computer since September 28, 2007 and today (1-5-2008) Avast is just now alerting me that this software is malicious. I would like to ignore these warnings and register this program as a program that is NOT malicious simply because I
know what the program does (I've not been hacked by anyone in the time period I've had the program). What the program is supposed to do is log the keys pressed on key keyboard and save them within the program, and when requested (once a master password has been entered) it allows the user to view the keys pressed to which process (e.g. TaskManager.exe, IExplorer.exe, etc.) and on which date and time the key chord was pressed (screenshots found on the website of the product). It doesn't send the information anywhere because anything trying to access the internet is prompted for my approval to access what it is trying to access first.

Separate, But related question
If there's no way to register a program (for some odd reason) as something non-malicious, then what if I created a similar program in Visual Basic 2005 or Visual Basic 6.0, would that program also register as a virus (Call it SecurityCam.vb)?
I was thinking of using the "GetAsyncKeyState" Application Program Interface (API) Call to check for each key pressed and add them to a text box.

Thx in advance
Markizano

EDIT: I'm using
Avast! 4.7 Home Editition
   Avast! version 4.7 Build Dec2007 (4.7.1098)
   Xtreme Toolkit version 1.9.4.0
   Using ActiveSkin Version 4.2.7.3
VPS File (Virus DataBase)
   Compilation Date 1-4-2008
   File Version 080104-0

EDIT2:
This is great LMFAO
I went to the site I got Revealer and downloaded the version that was updated in November and now Avast! says nothing about a Trojan or a Worm on my computer...WTF?!
Avast is beginning to look a lot like Norton (Which has too many holes just like this).

[Lisandro]

I would like to ignore these warnings and register this program as a program that is NOT malicious

You need to use the Exclusion lists:

For the Standard Shield provider (on-access scanning):
Left click the 'a' blue icon, click on the provider icon at left and then Customize.
Go to Advanced tab and click on Add button...

For the other providers (on-demand scanning such as the screen-saver or the Simple User Interface):
Right click the 'a' blue icon, click Program Settings.
Go to Exclusions tab and click on Add button...

You can use wildcards like * and ?.
But be careful, you should 'exclude' that many files that let your system in danger.

[Markizano]

Thank you so much for the help and the warnings. Yes I am cautious about what to exclude, which is why I specified the file instead of the path, just in case something does happen and something gets into the path.
Thanks again.

Markizano

[Lisandro]

Thank you so much for the help and the warnings. Markizano

You're welcome. Feel free to come back any time you need help you just to change experiences

[psw]

I would like to ignore these warnings and register this program as a program that is NOT malicious

You need to use the Exclusion lists:

For the Standard Shield provider (on-access scanning):
Left click the 'a' blue icon, click on the provider icon at left and then Customize.
Go to Advanced tab and click on Add button...

You can use wildcards like * and ?.
But be careful, you should 'exclude' that many files that let your system in danger.

I'm sorry but this feature (Exclusion list) doesn't operate for the Standard Shield provider (I'm using 4.7.1098 Home edition).
Example:
File keymaker.exe packed by UPX is detected by Avast as Win32: Troyan-gen {UPX}
I was trying to add c:\Work\keygen.exe to the Exception list at the Advanced tab.
Nothing change. The same Avast! warning when launching application.

Where a'm wrong?

[Lisandro]

File keymaker.exe
c:\Work\keygen.exe

Which is the name of the file? keymaker or keygen?
Are you sure you want to run an infected file?

[psw]

File keymaker.exe
c:\Work\keygen.exe

Which is the name of the file? keymaker or keygen?
Are you sure you want to run an infected file?

Sorry,
keygen.exe
In the Exception list keygen.exe too.
Yes, I'm really sure because of I unpacked this exe manually (via UPX -d ) and looked at this exe in IDA disasm

[Lisandro]

c:\Work\keygen.exe
should do the work. The most I can see is booting to apply the exclusion.

[psw]

c:\Work\keygen.exe
should do the work. The most I can see is booting to apply the exclusion.

I booted, I restarted avast! services, I changed interface language from Russian to English and versa
Nothing change.
So I suspect that this is a avast! bug, but I don't know how I can send Bug report.
I attached 2 printscreens (Advanced tab and Avast warning) to this post.

[Lisandro]

Yeah... seems that the Exclusion list is not working...

[SomeTwo]

Yeah... seems that the Exclusion list is not working...

Yes, i have used Avast for a long time now, and this is first "big" bug that i have found
Hope this will be corrected soon.

[igor]

psw, what operating system do you use?

[psw]

psw, what operating system do you use?

Win2kSP4en.

[technopagan]

I have had the same problem since the last Avast Update
I am using Avast 4.7 Home Edition
Build Dec2007 (4.7.1098)
VPS Comp date 27/02/2008
File Version 080227-0
On an XP machine with SP2


I have converted a bunch of Batch files to Executables  which automate a ton of stuff on my machine which all omes to a grinding halt if I don't leave On-Access protection turned off, I too have tried the exceptions list but no joy.

Is there a bug

[technopagan]

.... (Cont) ......fix in for this ?

If so is there any way to track it or be notified when it is resolved ?

Cheers