Hey guys, today i was making a keylogger using ardamax 3.0 full and file joiner 2.0 demo version as binder

so i made the keylogger, tested at novirusthanks.org only 3 results appear and those were "non-used AV's" i tried to pass this to my friend so we could test it
and kaspersky didnt detect but when he clicked to install this showed up

http://img48.imageshack.us/my.php?image=demoqc5.jpg

What now, isnt even the demo if file joiner work :\

what binder should i use than :\

Thnx