RootIQ - A smart root certificate scanner and manager for Windows

Discussion in 'other anti-malware software' started by svenfaw, Oct 4, 2020.

  1. Bill_Bright

    Bill_Bright Registered Member

    Joined:
    Jun 29, 2007
    Posts:
    3,662
    Location:
    Nebraska, USA
    I agree. So then the question is, "Is this software needed?"

    I personally don't see the need.

    :( While I understand the reason for the forum policy, the link I provided did not meet the justification for the policy as that policy is described here.

    My link simply illustrated that it was incorrect to state that only Windows Defender tagged RootIQ as potentially malicious. I was not "praising or bashing" the anti-virus scanner involved.

    That said, I note in that policy post the following,
    I agree 100% and is the point I was trying to make. Singling out Windows Defender and criticizing Microsoft for a false positive that was quickly corrected is misjudging the product and serves no real value.
     
  2. co22

    co22 Registered Member

    Joined:
    Nov 22, 2011
    Posts:
    382
    Location:
    router
  3. JRViejo

    JRViejo Super Moderator

    Joined:
    Jul 9, 2008
    Posts:
    53,892
    Location:
    U.S.A.
    Bill, it is plain and simple in the first paragraph of the policy. Since the posted scan was not requested by forum staff, it was removed. Just FYI.
     
  4. svenfaw

    svenfaw Registered Member

    Joined:
    May 7, 2012
    Posts:
    255
    New beta available: build 1883.

    First post has been updated to clarify the purpose of RootIQ, and how it is quite different from tools such as sigcheck or certmgr.
     
  5. reasonablePrivacy

    reasonablePrivacy Registered Member

    Joined:
    Oct 7, 2017
    Posts:
    1,183
    Location:
    Member state of European Union
    IIUC behavior monitoring is mostly based on seeing what system calls, system APIs program uses. Reading file from some path is based on API, so AV can see that. After reading file into process memory program doesn't have to rely on API to process its content. While I imagine AVs do indeed check some sections of process related to program instructions (were they overwritten by another program? were there injections by other programs?) I don't think they stop every other process in the system after every assembler instruction to see what happened with data read from files.
     
  6. Tarnak

    Tarnak Registered Member

    Joined:
    Feb 5, 2007
    Posts:
    4,859
    Just trying Build 1883, and note this difference:

    RootIQ_build 1883._only change that I can see_01.JPG
     
  7. Bill_Bright

    Bill_Bright Registered Member

    Joined:
    Jun 29, 2007
    Posts:
    3,662
    Location:
    Nebraska, USA
    And the fact the "system" is trusting 243 "unknown" roots is supposed to reassure users?

    How is that helpful?
     
  8. Tarnak

    Tarnak Registered Member

    Joined:
    Feb 5, 2007
    Posts:
    4,859
    I forgot to advise that it popped for me the very first time, but I ignored it. Still, all is good, because I ignored it again with build 1883. :cool:
     

    Attached Files:

  9. Tarnak

    Tarnak Registered Member

    Joined:
    Feb 5, 2007
    Posts:
    4,859
    Not for me to deduce. I just report what I see. :)
     
  10. Bill_Bright

    Bill_Bright Registered Member

    Joined:
    Jun 29, 2007
    Posts:
    3,662
    Location:
    Nebraska, USA
    And you are right. But again, how is a "normal" user supposed to interpret that? I don't know. It just makes me question how valuable this program is to the normal user.
     
  11. svenfaw

    svenfaw Registered Member

    Joined:
    May 7, 2012
    Posts:
    255
    There was a display bug causing an incorrect number of unknown roots to be shown in the summary.
    The latest build (1884) should fix it.
     
  12. Tarnak

    Tarnak Registered Member

    Joined:
    Feb 5, 2007
    Posts:
    4,859
    Just like the first time that I ran this, SecureAplus popped:

    RootIQ_build 1884_SAP_ scanning_04.JPG

    Anyhow, this is what I get with build 1884:

    RootIQ_build 1884.JPG
     
  13. svenfaw

    svenfaw Registered Member

    Joined:
    May 7, 2012
    Posts:
    255
    I'm happy to announce that RootIQ is no longer in beta. First stable version is 1.02 (build 1887), and is free for home use and evaluation purposes.

    A Pro (paid) version will be available soon, with several additional features.
     
  14. Tarnak

    Tarnak Registered Member

    Joined:
    Feb 5, 2007
    Posts:
    4,859
    Went all the way, testing that is...

    RootIQ_build 1887j_01.JPG
     
  15. mood

    mood Updates Team

    Joined:
    Oct 27, 2012
    Posts:
    33,336
    You don't need all those root certificates
    October 17, 2020
    https://hexatomium.github.io/2020/10/17/001.html
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.