RCC - check your system's trusted root certificate store

Discussion in 'other anti-malware software' started by svenfaw, Feb 28, 2015.

  1. guest

    guest Guest

  2. itsmeWario

    itsmeWario Guest

    Latest version show me that:
    Number of 'interesting' items: 3

    4460630BC1000E830D9339333CEB7448757EBE77: Blizzard Battle.net Local Cert
    Time of insertion: 2018-05-01 10:39:00 UTC

    4F65566336DB6598581D584A596C87934D5F2AB4: Class 3 Public Primary Certificat
    Time of insertion: 2018-05-01 10:30:06 UTC

    D23209AD23D314232174E40D7F9D62139786633A: Equifax Secure Certificate Author
    Time of insertion: 2018-05-01 10:39:00 UTC

    Also even if i closed Firefox i got:
    Scan suspended: make sure Firefox is not running and try again.
     
  3. jul_thi

    jul_thi Registered Member

    Joined:
    May 31, 2018
    Posts:
    1
    Location:
    Germany
    Email subscription...
    Looking for an updated RCC database.
    Thanks for the useful tool.
     
  4. wildafrica

    wildafrica Registered Member

    Joined:
    Jan 15, 2017
    Posts:
    12
    Location:
    EU
    Where can I download RCC?
     
  5. guest

    guest Guest

    Website
    But the download of RCC is temporarily unavailable
     
  6. EASTER

    EASTER Registered Member

    Joined:
    Jul 28, 2007
    Posts:
    11,126
    Location:
    U.S.A. (South)
    Any idea why or when it might be back up? Is this outage happen before?
     
  7. wildafrica

    wildafrica Registered Member

    Joined:
    Jan 15, 2017
    Posts:
    12
    Location:
    EU
    I know about the web but what can I do? I have 2 weird certificates in my PC
     
  8. anonskii

    anonskii Registered Member

    Joined:
    Dec 16, 2016
    Posts:
    20
    Location:
    UK
    this app is unavailable on the website, how can i get it?
     
  9. Buddel

    Buddel Registered Member

    Joined:
    Apr 28, 2015
    Posts:
    1,920
    Send an email to the developer and ask him: feedback-at-trustprobe-dot-com/
     
  10. EASTER

    EASTER Registered Member

    Joined:
    Jul 28, 2007
    Posts:
    11,126
    Location:
    U.S.A. (South)
    Wonder why it was pulled?

    Safety review precaution perhaps.

    Temporarily
    unavailable
     
  11. Buddel

    Buddel Registered Member

    Joined:
    Apr 28, 2015
    Posts:
    1,920
    Don't know why it was pulled. Maybe there are compatibility issues with Win 10. Who knows.
     
  12. svenfaw

    svenfaw Registered Member

    Joined:
    May 7, 2012
    Posts:
    291
    It was pulled because the root cert definitions are very outdated, and I haven't had much time to take care of that lately.
     
  13. Buddel

    Buddel Registered Member

    Joined:
    Apr 28, 2015
    Posts:
    1,920
    Thanks for letting us know the reason why RCC was pulled. Much appreciated.
     
  14. anonskii

    anonskii Registered Member

    Joined:
    Dec 16, 2016
    Posts:
    20
    Location:
    UK
    so it's discontinued?
     
  15. Logic11

    Logic11 Registered Member

    Joined:
    Nov 19, 2018
    Posts:
    2
    Location:
    South Africa
    Hi all. I'm new here but have found this forum very useful over the years.

    I noticed I was no longer getting the green lock in chrome for any site, went searching and found:
    https://www.grc.com/fingerprints.htm
    I only get a matching fingerprint for www.grc.com and no other site.
    That lead me here where I found that the latest version of RCC is unavailable!? :(
    https://www.trustprobe.com/fs1/apps.html

    Softpedia claims to have a version 1.0.69.35 available:
    https://www.softpedia.com/get/Security/Security-Related/RCC.shtml
    I think it's safe to assume that they DO NOT and that version is compromised and probably malicious?
    This is VirusTotal's take on it:

    ~ Removed VirusTotal Results as per Policy ~

    CrowdStrike Falcon: (ML) malicious_confidence_70% (W) 20181022
    VBA32: BScope.Trojan.Downloader

    Now when only 2 AVs out of 67 think theres an issue I ten to believe the other 65, but the version thing has me suspicious?

    Does anyone have a copy of the original version 1.69.037 or te mentioned ...038 plz?
     
    Last edited by a moderator: Nov 19, 2018
  16. B-boy/StyLe/

    B-boy/StyLe/ Registered Member

    Joined:
    Sep 19, 2012
    Posts:
    508
    Location:
    Bulgaria
    Here we go:

    1.69.038
    www88.zippyshare.com/v/llyIiBav/file.html

    VT link (0/67)
     
    Last edited: Nov 19, 2018
  17. kronckew

    kronckew Registered Member

    Joined:
    Aug 27, 2006
    Posts:
    455
    Location:
    CSA Consulate, Glos., UK
    Rcc.exe from that link Passed my AV ok, Running it only gives a message that it is old and you should check for a new verion.
     
  18. svenfaw

    svenfaw Registered Member

    Joined:
    May 7, 2012
    Posts:
    291
    RCC 1.69.041 available (long overdue!)

    SHA256: 62c0393bd795e1842f8b759e955312ac1271c53e57ff657d284c7af9414dc3ef
     
  19. Gandalf_The_Grey

    Gandalf_The_Grey Registered Member

    Joined:
    Jan 31, 2012
    Posts:
    1,188
    Location:
    The Netherlands
    Thanks @svenfaw :thumb:
    I have 3 interesting certificates:
    Code:
    Number of 'interesting' items: 3
    
    31F9FC8BA3805986B721EA7295C65B3A44534274: Microsoft ECC TS Root Certificate
                           Time of insertion: 2018-10-07 15:08:51 UTC
    
    2E64F21C2B4D5558E3FB968DA25BCBBA8AF407B7: Kaspersky Anti-Virus Personal Root
                           Time of insertion: 2018-11-19 14:18:11 UTC
    
    D23209AD23D314232174E40D7F9D62139786633A: Equifax Secure Certificate Author
                           Time of insertion: 2018-10-15 21:09:29 UTC
    1 one is new for Windows 1809 I think
    2 one is from my AV
    3 one I have to distrust?
    What do you guys think?
    Edit: the Equifax Certficate is revoked and no longer valid. So nothing to do?
     
    Last edited: Nov 20, 2018
  20. focus

    focus Registered Member

    Joined:
    Feb 5, 2007
    Posts:
    503
    Location:
    USA
    Thanks!
     
  21. SouthPark

    SouthPark Registered Member

    Joined:
    Jun 13, 2012
    Posts:
    735
    Location:
    South Park, CO
    Thanks for the update!
     
  22. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    5,868
    file says 1.69.38, please correkt.

    why is AOL and Equifax from interest?
     
  23. Hiltihome

    Hiltihome Registered Member

    Joined:
    Jul 5, 2013
    Posts:
    1,131
    Location:
    Baden Germany
  24. itsmeWario

    itsmeWario Guest

    Hashes are outdated: https://hexatomium.github.io/hashes.html

    For latest RCC.exe - Version 1.69.041 from 2018-11-20 (program itself say its Version 1.69.38!)
    i got:
    MD5: e1de7a0314720b584ed7986d3b09185b
    SHA1: 4644fc7f54596091ba7056a4c65dc82e8fff8e80
    SHA2-256: 62c0393bd795e1842f8b759e955312ac1271c53e57ff657d284c7af9414dc3ef
    SHA2-512: d25503d100a8ca3e3c1c1fe2beb17ee0e2cb066a3d9202b3be727d171a7a4d24e9d58ecb7cd81117971cfa1417cf21175916f8e34ca109892d87491dab2ceea2
    SHA3: 6e45f8f868ce991088efdbd2c51fbd0afce34726c056f038306856cceff4c0705802ac631ca56ed71b5d51a725565a1c92e6ed37d5698cf71665941d813a7e47
     
  25. Adric

    Adric Registered Member

    Joined:
    Feb 1, 2006
    Posts:
    1,760
    Yes, the dev tends to forget to update the hashes and file version info now and then. If you launch the program you will see it is v41. At least that's what I'm seeing
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.