When I install “Revelation” ( www.snadboy.com/ ), Avast is giving me a malware alert. It’s a key-logging program for uncovering passwords hidden by asterisks.
I’ve used this program, this version, for a couple years, and now it’s getting blocked.
I used to use an old version of this program, so the way it works now may be different. The way it worked, was you ran the program, then ran the cursor over the *'s to reveal the letters. If the program is still the same, could you not just pause the scanner while you used the program?
Yes, I could just turn off Avast for the specific time(s) I need to… but:
Isn’t there a “permanent ‘This is Safe’ notice”?
Barring (or on top of ) that, why all of a sudden, and will it then also show up during normal scans?
Due to all the above, and since you seemingly don’t use it anymore, is there another program that’s “safe”?
Regards,
Chuck Billow
I used to use an old version of this program, so the way it works now may be different. The way it worked, was you ran the program, then ran the cursor over the *'s to reveal the letters. If the program is still the same, could you not just pause the scanner while you used the program?
<<
I have no more kids using my computor, that for reasons known only to them, that had to put passwords anywhere there was the option to.
Did you try, standard shield, customize, advanced? I’m not sure if it will accept complete file paths, but might be worth a try. I wouldn’t even know where to look for a “safe” similar program. Sorry.
If it is indeed a false positive, add it to the exclusions lists (Standard Shield, Customize, Advanced and Program Settings, Exclusions) and check scan it periodically using the ashQuick scan (right click scan), when it is no longer detected then remove it from the exclusions.
Also see (Mini Sticky) False Positives and send a sample to avast so that it might be analysed and the VPS updates if required, helping other avast users.
Results of a file scan
This is a report processed by VirusTotal on 06/25/2006 at 18:49:06 (CET) after scanning the file “Revelation.exe” file.
Antivirus Version Update Result
AntiVir 6.35.0.16 06.25.2006 no virus found
Authentium 4.93.8 06.23.2006 no virus found
Avast 4.7.844.0 06.23.2006 Win32:Snadboy
AVG 386 06.25.2006 no virus found
BitDefender 7.2 06.25.2006 no virus found
CAT-QuickHeal 8.00 06.24.2006 no virus found
ClamAV devel-20060426 06.23.2006 no virus found
DrWeb 4.33 06.25.2006 no virus found
eTrust-InoculateIT 23.72.49 06.25.2006 no virus found
eTrust-Vet 12.6.2272 06.23.2006 no virus found
Ewido 3.5 06.25.2006 no virus found
Fortinet 2.77.0.0 06.25.2006 HackerTool/SnadBoy
F-Prot 3.16f 06.23.2006 no virus found
Ikarus 0.2.65.0 06.23.2006 PSWTool.Win32.SnadBoy.2011
Kaspersky 4.0.2.24 06.25.2006 not-a-virus:PSWTool.Win32.SnadBoy.2011
McAfee 4792 06.23.2006 potentially unwanted program PWCrack-SnadBoy
Microsoft 1.1481 06.25.2006 no virus found
NOD32v2 1.1622 06.25.2006 no virus found
Norman 5.90.21 06.23.2006 no virus found
Panda 9.0.0.4 06.25.2006 no virus found
Sophos 4.07.0 06.25.2006 no virus found
Symantec 8.0 06.25.2006 no virus found
TheHacker 5.9.8.164 06.23.2006 Trojan/SnadBoy.2011
UNA 1.83 06.23.2006 no virus found
VBA32 3.11.0 06.24.2006 no virus found
VirusBuster 4.3.7:9 06.25.2006 no virus found
VirusTotal is a free service offered by Hispasec Sistemas.
Keylogging programs are NEVER "safe"; you never know
when an "update" may contain some spyware to further
invade your privacy ( or worse ) .
Since the "Report" shows there may be a problem, what
does a "Full Scan" of your antiSPYWARE program show ?
And should always mention the name of your Operating
System, so recommendations can be "targeted" to it .
A Google "search" revealed the following :
http://virusinfo.prevx.com/viruscenter.asp?GRP=1642400027 .
It is down to you if you decide to accept that it is for god rather than malicious use on your own system and that the program doesn’t phone home, etc. Then you can add it to the exclusions lists of the Program Settings, exclusions and Standard Shield.
Known Problems
False Alert Problems: Some Antivirus programs detect Protected Storage PassView utility as infected with Trojan/Virus.
Recent update: Norton Antivirus detect Protected Storage Passview as an hack tool.
Neither of the ones I mentioned are detected by avast! the major issue is intent and the fact that AVs can’t determine intent so may flag just in case (some might say that is a false positive). So if you are aware of what its purpose is and you installed it no problem ad to exclusions if it were to be detected.
I have had one version or other of both tools on my system for years and they have never been flagged.