Allowing programs detected as Malware to run

General Topics
1

I was having a problem with one of my programs everytime I start my computer it picks it up as Malware. I want to allow this program to run. Does any one know how I go about doing so? Thanks in adavance I really appreciate it.

2

Welcome to the forums, norcaljunior. :slight_smile:

Well, a little more information would be helpful if an answer is to be found … like what program is being detected as malware, what is detecting it, etc.

3

http://img291.imageshack.us/img291/8230/new6nl.png

Thanks CharleyO :slight_smile:

Heres a screenshot and the problem right when I boot up Avast is detecting 007 Spy Software as Malware.

4

To know if a file is a false positive, please submit it to JOTTI or VirusTotal and let us know the result. If it is indeed a false positive, send it in a password protected zip to virus@avast.com

Please, mention in the body of the message why you think it is a false positive and the password used.

If you’re sure the application is NOT a malware, then you can use the Exclusion lists:

For the Standard Shield provider (on-access scanning):
Left click the ‘a’ blue icon, click on the provider icon at left and then Customize.
Go to Advanced tab and click on Add button…

For the other providers (on-demmand scanning):
Right click the ‘a’ blue icon, click Program Settings.
Go to Exclusions tab and click on Add button…

You can use wildcards like * and ?.
But be carefull, you should ‘exclude’ that many files that let your system in danger.

5

What was the program you are having problems with ?
Strange that the program would have its own copy of svchost.exe and put it in the Microsoft Shared\DOA (Data Access Objects) folder.

Well firstly it seems a strange location to have svchost.exe the fact that it is PE file with possible spyware is stranger. There is no copy of svchost.exe in that folder on my system WinXP Pro.

6

Note: The svchost.exe file is located in the C:\Windows\System32 folder.
In other cases, svchost.exe is usually a virus, spyware, trojan or worm!

7

:slight_smile: Hi norcaljunior :

  Found an interesting thread on the subject at :

 http://www.lavasoftsupport.com/index.php?showtopic=431 ;

 appears this is a "keylogger" and the Malware Expert & "snappy"
 eventually agreed it is wise to remove this "unknown" program OFF
 the computer . "Snappy" might have recommended this "action" to
 his friends who had the same "program" !? 

 Other security programs identified this "program" as :
"PSW....... PdPinch......." .
8

Thanks for all your responses you guys are cool. I tryed this but it seems to still pick it up hmm. And yes that was an interesting thread the program is a keylogger. I just can’t seem to get it to operate without Avast picking it up :cry: Also I found this link http://www.e-spy-software.com/helpdesk/T3.shtml

9

You still haven’t mentioned what the program is (e-spy ?) and what it is for (parental control, etc. ?) But personally I wouldn’t use it with all this potential for harm. There have got to be other programs that can do the same thing without this issue.

Did you submit the suspect file to Jotti as suggested and what were the results ?

It is your system but if you want to run it you can exclude it as Tech explained in his post that you quoted, what did you enter in the exclusions for the path to the file svchost.exe ?
This will help us check if it is correct.

10

Nevermind I typed the path wrong I was getting it to exclude the folder instead of the exe. So now it works fine now thanks to the Tech and DavidR for your assistance. ;D ;D ;D

11

Glad we could help, welcome to the forums.