💥 New Security Certificate. Need some help 💥

[jsmorley]

We are using a new security "certificate" from SignPath for our builds, and we need a little help from you guys in building the initial "reputation" for the certificate.

I have created a link to a new Rainmeter-4.5.19.3742.exe build to this post, and what we need is for as many folks as possible to download and install this build. Be aware that either your browser (certainly Edge, not sure about others), or Windows SmartScreen will bark when you download and / or install this, warning that this is an "unknown" software, and making you jump through a hoop or two to override this.

Once the "reputation" for the certificate has been "built" with Microsoft, I will remove this post, and going forward there should be no issues with any build.

Thanks so much!

Get this:

New one!!!

https://builds.rainmeter.net/test_builds/Rainmeter-4.5.21.3750.exe

[jsmorley]

With Microsoft Edge, you get a warning when downloading, and you need to tell it to "keep" the download. This is buried a bit under a link on the warning. Do that, and then install. Windows SmartScreen will not object, as Edge (from Microsoft) has taken care of it.

With Chrome, and presumably others, you will also get a warning when downloading, and will need to force it to "keep" it. However, in addition you will get a warning from Windows SmartScreen when you go to install it.

I'll be glad when we can get enough "reputation" for the certificate, and won't have to deal with this...

[Yincognito]

Quick question: is it enough to download it? I can do that from both my phone and my laptop, but obviously can't install it on my Android phone, only on laptop. Also, does the process you mentioned work if using ad blockers / firewalls / download managers / UAC & SmartScreen off and the like, on either one or both devices (Samsung Browser and Chrome)?

[jsmorley]

Quick question: is it enough to download it? I can do that from both my phone and my laptop, but obviously can't install it on my Android phone, only on laptop. Also, does the process you mentioned work if using ad blockers / firewalls / download managers / UAC & SmartScreen off and the like, on either one or both devices (Samsung Browser and Chrome)?

Yeah, you need to install it so Windows SmartScreen sees it.

I'm not sure about ad blockers, but suspect they don't matter

[eclectic-tech]

Windows Defender is quarantining this even though it was mark to "keep" and reported "safe" to M$.

virus.jpg

The download is not displayed as an available file in the Download folder even after selecting the action to "Allow".

Specs:
Rainmeter 4.5.18.3727 (64-bit)
Language: English (1033)
Build time: 2023-07-31 11:58:37
Windows 10 Home 22H2 (build 19045.4046) 64-bit - English (1033)
Path: C:\Program Files\Rainmeter\
SkinPath: C:\Users\xxxx\Documents\Rainmeter\Skins\
SettingsPath: C:\Users\xxxxx\AppData\Roaming\Rainmeter\
IniFile: C:\Users\xxxxx\AppData\Roaming\Rainmeter\Rainmeter.ini

[jsmorley]

Windows Defender is quarantining this even though it was mark to "keep" and reported "safe" to M$.
virus.jpg
The download is not displayed as an available file in the Download folder even after selecting the action to "Allow".

Specs:
Rainmeter 4.5.18.3727 (64-bit)
Language: English (1033)
Build time: 2023-07-31 11:58:37
Windows 10 Home 22H2 (build 19045.4046) 64-bit - English (1033)
Path: C:\Program Files\Rainmeter\
SkinPath: C:\Users\xxxx\Documents\Rainmeter\Skins\
SettingsPath: C:\Users\xxxxx\AppData\Roaming\Rainmeter\
IniFile: C:\Users\xxxxx\AppData\Roaming\Rainmeter\Rainmeter.ini

See what is under "learn more"

[eclectic-tech]

Here is where "Learn more" takes us:
https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?name=Trojan%3AWin32%2FWacatac.B!ml&threatid=2147735505

[jsmorley]

Here is where "Learn more" takes us:
https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?name=Trojan%3AWin32%2FWacatac.B!ml&threatid=2147735505

Hmm. Strange that you can't override this and keep it.

[eclectic-tech]

Hmm. Strange that you can't override this and keep it.

Yeah, usually I have no problem telling Defender to "keep" and "allow", but with this file it is not co-operating!

[jsmorley]

Yeah, usually I have no problem telling Defender to "keep" and "allow", but with this file it is not co-operating!

Strange, I just manually scanned it with Defender, and it came up clean.

2024-02-21_140644.png