Whitelisting application - help required [RESOLVED]

Hello,

We submitted a whitelisting application at 2020-09-25, and fixed the software according to the researcher’s feedback, but have not received any response regarding the status of our application yet. Avast does not respond to our emails, so I am asking you to forward the message to the whitelisting team to find the application and update its status.

Our product is AppWizard (https://appwizard.ru), it is a software catalog which is distributed as a portable shell (standalone executable) and a complete installation (shell/update system/support tools). AppWizard contains offers from well-known vendors like Yandex or Opera, and the offers follow industry standards and clean guidelines (one offer per page, explicit Accept/Decline buttons, etc).

Most of installer builds get FileRepMalware detection in several days. Although there is a probability that an individual build may be whitelisted through the false-positive form, in the meantime AV software prevents execution of the installer, and the detection lowers the program reputation on Virustotal, causing additional distrust from users.

At 2020-09-25 we opened the whitelisting request [ ref:_00Db0Z3Sf._5005p2HALTP:ref ]. According to the researcher’s feedback the following things were fixed:

  • modified offer parameres not to create an additional shortcut;
  • removed virtual machine checks;
  • fixed uninstaller to delete the updater scheduled task;
  • added a switch to options screen to control the scheduled task;
    Later we even removed the updater from the distribution to decrease the chance of detection.

At 2020-11-25 we opened a false-positive request [ ref:_00Db0Z3Sf._5005p2JnTtO:ref ] for a newer installer build and fixed offer pages according to the feedback:

  • every page contains Accept and Decline buttons;
  • option checkboxes are accessible by default (older installers required one more click to edit them);
  • added option for Opera to set as default browser.

At 2020-12-03 we opened another false-positive request for a newer installer build, and Avast specialist responded that the file will be still classified as PUP - potentially unwanted. It does not make a difference, as Avast blocks these files just as viruses.

I did read these articles:

Everything that could lead to adware-related detection has been fixed so far, but since the first whitelisting application it is impossible to re-apply from the same email or domain, and there are no way of communication via email. That is why I am asking for help on the forum.

Best regards,
Constantin.

Hello again,

It’s been a while since I posted the first message, but there were no response through forum posts, private messages or email. Can you give a hint, what is wrong?

If I should have posted the thread elsewhere, and that is why you are not answering, please move it in the correct location if possible, or let me know.

Hi there and sorry for the delayed response. We just sent an email response to one of your previous false-positive reports (reference ID 12510174).

Hi prokopes_,

Thank you for the reply. We’ve fixed the issues you mentioned and published the updated version.

Looking forward to continue the whitelisting process.

Initial detection could have been IP related, see a.o.:
https://www.virustotal.com/gui/ip-address/104.21.22.188/relations

Was there any reporting to: -https://a.nel.cloudflare.com/report?s=5zocGiLLP%2FaIvrMFhY5b2U0onr6w%2BUh%2F7wpYlkCWe%2BbOlo2Fk6KrMiTfVzN4j1aJrMfqBSNvfvR%2FE1LbFVKJRHiq1R6JMd0dExofJ1Y%3D ? :stuck_out_tongue:

I have observed some issues recently that are CloudFlare related,
and then later developers are wrongly barking up the avast-tree :wink:

Good, the issue has been solved now.

polonus

Got confirmation from Avast, AppWizard has been whitelisted. I am very grateful for your help.

We will report the IP address issue to Cloudflare.