Author Topic: WowApp application considered dangerous after certificate update  (Read 3249 times)

0 Members and 1 Guest are viewing this topic.

Offline andrei.dica

  • Newbie
  • *
  • Posts: 16
WowApp application considered dangerous after certificate update
« on: September 14, 2017, 01:20:38 PM »
Hello,

I work for wowapp.com, we've developed a messenger called WowApp, which is normally whitelisted for Avast. We've had to update our code-signing certificate and now we are considered a threat. Can you, please, help me understand what the issue is and how it could be fixed ?

Note: I am obviously not comfortable sharing a dev version of our app on an open forum, so i will add a picture and the name of the build that is considered dangerous. If i understand correctly, the file has already been "submitted for interogation", so you should have access to it.
https://ibb.co/dQD3UQ

Please let me know if i can help you with more information. Thank you.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline andrei.dica

  • Newbie
  • *
  • Posts: 16
Re: WowApp application considered dangerous after certificate update
« Reply #2 on: September 14, 2017, 01:56:22 PM »
Hey Asyn,

We've already attempted to whitelist the build, but after 3 emails (in the span of 3 weeks), we have no answer yet. We also created a ticket "#943920 Avast considers the WowApp application as a virus.", but still, no answer.  For the second link, as i stated above, we were whitelisted before updating the certificate and we have not changed anything to break the Avast Clean Guidelines.

Because of these reasons, i decided to try the forums for a solution.

Regardless, thank you for the help.


Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: WowApp application considered dangerous after certificate update
« Reply #3 on: September 14, 2017, 02:10:17 PM »
OK, I'll forward it for you. Cheers
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: WowApp application considered dangerous after certificate update
« Reply #4 on: September 14, 2017, 02:39:30 PM »
According to your screenshot avast doesn't consider the app as malware.
It is just analyzing it.

Offline Milos

  • Avast team
  • Super Poster
  • *
  • Posts: 2293
Re: WowApp application considered dangerous after certificate update
« Reply #5 on: September 14, 2017, 03:33:32 PM »
Hello,
according to the screenshot it looks that the file is not digitally signed or the signature was not verified. Can you share the file to verify it, please?

Milos

Offline andrei.dica

  • Newbie
  • *
  • Posts: 16
Re: WowApp application considered dangerous after certificate update
« Reply #6 on: September 15, 2017, 11:19:36 AM »
Hey Milos,

I uploaded the file on your FTP server, following the guidelines from here https://www.avast.com/faq.php?article=AVKB160.

The name of the archive is
andrei.dica@woowteam.com WowApp.7z
pass: virus

It contains all 3 of our builds: a full isntaller for Windows, a boostrapper for Windows and a full installer for Mac

Let me know if i can help with anything else.

Thank you for the help everybody.

Offline andrei.dica

  • Newbie
  • *
  • Posts: 16
Re: WowApp application considered dangerous after certificate update
« Reply #7 on: September 19, 2017, 11:54:17 AM »
^Bump

Offline Milos

  • Avast team
  • Super Poster
  • *
  • Posts: 2293
Re: WowApp application considered dangerous after certificate update
« Reply #8 on: September 19, 2017, 12:04:25 PM »
Hello,
thank you for the smaples. I am still waiting for a response from a our QA to find out why it did not recognize the digital signature.

Milos

Offline andrei.dica

  • Newbie
  • *
  • Posts: 16
Re: WowApp application considered dangerous after certificate update
« Reply #9 on: September 19, 2017, 01:10:53 PM »
Thank you for the update Milos.

Andrei

Offline andrei.dica

  • Newbie
  • *
  • Posts: 16
Re: WowApp application considered dangerous after certificate update
« Reply #10 on: September 25, 2017, 06:15:26 PM »
Hey guys, anything new ?

Offline Milos

  • Avast team
  • Super Poster
  • *
  • Posts: 2293
Re: WowApp application considered dangerous after certificate update
« Reply #11 on: September 26, 2017, 01:08:43 PM »
Hello.
our dev team made some changes, but to see the correct info in the popup it requires to release a program update. I have classified the certificate to not send such signed samples to DeepScreen so after next VPS update it should not do to DeepScreen and then CyberCapture.


Milos

Offline andrei.dica

  • Newbie
  • *
  • Posts: 16
Re: WowApp application considered dangerous after certificate update
« Reply #12 on: October 02, 2017, 01:44:54 PM »
The issue is not present anymore :D.

Thank you Milos, and everybody else, for your help in this matter.

Andrei