RCC - check your system's trusted root certificate store

Discussion in 'other anti-malware software' started by svenfaw, Feb 28, 2015.

  1. sm1

    sm1 Registered Member

    Joined:
    Jan 1, 2011
    Posts:
    533
    @svenfaw thanks for the link:) I had mcafee installed till yesterday. Might be the uninstall did not remove the certificates. But I wonder how it got installed after I removed mcafeeo_O? Might me it was not uninstalled properly and some mcafee components were updating. I had to try their removal tool and manually remove these certificates.
     
  2. itsmeWario

    itsmeWario Registered Member

    Joined:
    Jul 22, 2016
    Posts:
    15
    Location:
    Germany
  3. svenfaw

    svenfaw Registered Member

    Joined:
    May 7, 2012
    Posts:
    195
    Not enough time... :(
    I'm still working on a more advanced GUI tool though.
     
  4. itsmeWario

    itsmeWario Registered Member

    Joined:
    Jul 22, 2016
    Posts:
    15
    Location:
    Germany
    Okay.
    Can't wait for that! :thumb:
     
  5. itsmeWario

    itsmeWario Registered Member

    Joined:
    Jul 22, 2016
    Posts:
    15
    Location:
    Germany
  6. svenfaw

    svenfaw Registered Member

    Joined:
    May 7, 2012
    Posts:
    195
  7. itsmeWario

    itsmeWario Registered Member

    Joined:
    Jul 22, 2016
    Posts:
    15
    Location:
    Germany
    What is the current status for RCC ?
     
  8. svenfaw

    svenfaw Registered Member

    Joined:
    May 7, 2012
    Posts:
    195
    Due to time constraints, I am releasing updates at a slower pace.

    A new build should be available by this weekend.
     
  9. svenfaw

    svenfaw Registered Member

    Joined:
    May 7, 2012
    Posts:
    195
    Build 1.69.012, with updated signatures, is now available for download.
     
  10. Tarnak

    Tarnak Registered Member

    Joined:
    Feb 5, 2007
    Posts:
    4,365
    I haven't run this since last year, because I only had the XP desktop.

    However, I now have a laptop [Surface Book], Windows 10, and thought I would get reacquainted with this utility.

    I was surprised to see this. I guess it is OK.

    RCC_Windows Smartscreen _01.JPG
     
  11. itsmeWario

    itsmeWario Registered Member

    Joined:
    Jul 22, 2016
    Posts:
    15
    Location:
    Germany
    Thanks!

    It is still necessary to copy the cert.db and nssckbi.dll from Pale Moon to the RCC folder, but it works.

    @Tarnak: This is normal, because the file comes from another PC and unknown Publisher but the file is clean.
     
  12. Gandalf_The_Grey

    Gandalf_The_Grey Registered Member

    Joined:
    Jan 31, 2012
    Posts:
    469
    Location:
    The Netherlands
    Thank you for updating the program.
    Does anybody know where the 2 detected certificates come from?
     

    Attached Files:

  13. mood

    mood Registered Member

    Joined:
    Oct 27, 2012
    Posts:
    2,549
    "XBL Server ..." - maybe something Xbox-related? XBL = Xbox Live
    Installing a game or using the Xbox-App may have added this. :cautious:
     
  14. Pharaohs

    Pharaohs Registered Member

    Joined:
    Jun 14, 2016
    Posts:
    3
    Location:
    USA
    I also have these and hopefully it's due to the Xbox live service (or potentially hardware related to the Xbox Controller). I know the wireless controller is treated like a network device so..IPSEC? Anyway, you would think it would be easy to find info on that if it's an official MS cert but there's literally nothing on the internet about it. :mad:
     
  15. mood

    mood Registered Member

    Joined:
    Oct 27, 2012
    Posts:
    2,549
    Yes, it's not easy to review the purpose of certificates, if nothing or very few can be found. :(
     
  16. svenfaw

    svenfaw Registered Member

    Joined:
    May 7, 2012
    Posts:
    195
    The "Time of insertion" information can often be very useful in such cases. When investigating unknown certs, check if you installed new hardware or software at that time, or played a new game for the first time.

    Also can you have a look in certmgr.msc to see if these certs carry any private keys?
     
  17. boredog

    boredog Registered Member

    Joined:
    Feb 1, 2015
    Posts:
    2,474
    after running RCC I see some red and some are from Adguard. I am wondering if I can delete the eset one since I don't have that installed.

    in certmgr.msc I have one from Heimdal and that I have not had installed for a year. I should be able to delete that one also?
     

    Attached Files:

  18. mood

    mood Registered Member

    Joined:
    Oct 27, 2012
    Posts:
    2,549
    If Heimdal and ESET are deinstalled, the corresponding certificates can be deleted.
     
  19. Hiltihome

    Hiltihome Registered Member

    Joined:
    Jul 5, 2013
    Posts:
    697
    Location:
    Baden Germany
    Yes, but they are legit and do no harm.
    Both security companies are trustworthy and there are so many questionable certificates in the store, I would worry more about...
     
  20. mood

    mood Registered Member

    Joined:
    Oct 27, 2012
    Posts:
    2,549
    If i use /strict more certificates (26) are displayed, but i'm not sure about some of them. I'll better leave them that way :cautious:
     
  21. Hiltihome

    Hiltihome Registered Member

    Joined:
    Jul 5, 2013
    Posts:
    697
    Location:
    Baden Germany
    @mood:
    So you are following the same guideline, as me:
    If it ain't broke, don't fix it.

    I have set my ZAM to scan for suspicious Root-CA, but ZAM did not report any.
    Even if it did, I would not fire, without deep investigation.
     
    Last edited: Dec 8, 2016
  22. subhrobhandari

    subhrobhandari Registered Member

    Joined:
    Nov 6, 2009
    Posts:
    746
    Any chance for an update? Now it shows old database and quits automatically.
     
  23. svenfaw

    svenfaw Registered Member

    Joined:
    May 7, 2012
    Posts:
    195
    There was a problem with the download link. Updated version (1.69.013) is now available.
     
  24. itsmeWario

    itsmeWario Registered Member

    Joined:
    Jul 22, 2016
    Posts:
    15
    Location:
    Germany
  25. Macha

    Macha Registered Member

    Joined:
    Mar 8, 2016
    Posts:
    3
    Location:
    France
    Hello

    I have a problem with latest version : 1.69.013
     

    Attached Files:

Loading...