Trojan:Win32/Wacatac.B!ml detected

[Krenb]

Hi,

Microsoft defender detected Trojan:Win32/Wacatac.B!ml on latest official update (3.69.0). According to you is it a false-positive ?
Have a very nice day.

[botg]

You need to report this AI-generated false-positive to you AV vendor.

[Krenb]

Ok, thanks so much for your reply

[dwart]

the latest update also contains an invalid signature

[botg]

There is nothing wrong with the signature. Make sure your operating system's trust store is up-to-date and that your system's clock is synchronized with the rest of the world.

[boco]

Code: Select all

https://support.sectigo.com/Com_KnowledgeDetailPage?Id=kA01N000000rfBO

Go to the mentioned site on the Sectigo Knowledgebase. There, download and install the "Sectigo Public Code Signing CA R36". Seems like this relatively new intermediate certificate hasn't arrived everywhere, yet.

FZ_3.69.png (11.86 KiB) Viewed 2670 times

[botg]

"Relatively new"? The intermediate was issued back in 2021. It's practically antique.

[boco]

Yeah I misread. It's your cert that starts 2025-02-11. Yet, I didn't have it, somehow, and manually updating the trust store from MS didn't add it.

[botg]

Normally Windows phones home when you download/open a file and the certificate isn't known yet to obtain it.