Whitelisting Issues - Two Questions

Viruses and worms
1

Hi there, I’ve submitted my desktop app for whitelisting. I have two parts to my question.

  1. I uploaded two versions of the same app - one for OSX and one for Windows. On 11th December, I was only notified to say that the PC installer has been whitelisted, but still nothing about the Mac installer. They both use the same digital certificate, so are they both whitelisted?
  2. Even after the PC installer has been whitelisted, Avast is still freaking out a little when I try to open my app. I get a toolbar popup that says Avast is checking to make sure it is safe (it doesn’t do that with other apps). Then it pops a second message saying everything is OK. Worse though, it repeats this over and over until I X out of both popups to stop it. It seems OK after that but I would imagine it would worry a lot of users. Screenshot: https://imgur.com/a/Ywl5F5e

I’ve emailed a few times since December, but never heard anything back. Any help would be greatly appreciated :slight_smile:

2

Hello,
is the “pulse.exe” the file that you have submitted for whitelisting? Can you post the sha256 of that file to verify if it was whitelisted.

Milos

3

Yes its Pulse.exe that was submitted for whitelist. The SHA is 38A10D7A627399CEE4C66A7AFECF0884D4835C034597872AC2D04FE72B9B03D0

4

Hello,
thank you for the sha256. It is actually sha256 of the whole setup which is whitelisted. The problem is that we were not able to unpack it so the inner file “pulse.exe” sha256: 9f3b1eee55da2ee14fcb94a9fc8d62bffb427c6d8d0e44e3ab8a7579c4e8cda4 (seen on the screenshot) was not whitelisted. We will fix it in few minutes.

Milos

5

OK great thanks for letting me know. Has that been done now?

Also, to confirm, both the PC and Mac versions are whitelisted is that right? Thanks!

6

I was referring only to 38A10D7A627399CEE4C66A7AFECF0884D4835C034597872AC2D04FE72B9B03D0 and files unpacked from this file. I am not aware of the Mac version.

Milos

7

I uploaded a Mac version and a PC version. Do I need to re-upload the Mac version again so?

Also, has the PC version with the SHA I posted been whitelisted now?

8

Just checking on this again.

I uploaded a Mac version and a PC version. Do I need to re-upload the Mac version again so?

Also, has the PC version with the SHA I posted been whitelisted now?

9

If you will post sha256s of the uploaded files then I can check.

Milos

10

Latest version of our app is v34 and the SHA256 for each is:

pulseSetup.exe (Windows) - ea6d968f3b42a55e2e4afa2b33f7a48c89bd67861426dd3eb8a411bfdbce6f67
pulse-mac.dmg (Mac) - 0ffec4a4b8d79bee40f7a6f6355863a4d4213ca05fac380e56eca399f34a8985

Do we need to upload the new version of the installer to be whitelisted each time we release a new version of the app?

11

Hello,
I haven’t found these samples in our system.

Yes, if the file changes it needs to be uploaded. Or better solution is to digitally sign every executable file.

Milos