BT17R

I was reading on another forum that Certificates may allow spyware to be constantly reinstalled on a computer even after an AdAware or Spybot cleaning. Anything to this post and suggestions?

"From the Certificates Manager you'll see tabs for Personal, Other People, Immediate Certificates Authorties, and Trusted Root Certificates.

Your Personal and Other People tabs should be empty. Immediate Certificates entries can all be deleted (you'll see lots of junk there), and finally in Trusted Root Certificates the only ones not to delete are from Microsoft. Lots of foreign companies there plus verisign and equifax."

Churnd

Where's Mark when you need him.... I wanna know too! I've got a whole list of certificates under Trusted Root, only 3 of which are Microsoft ones.

jruz

Don't remove the trusted / root certs. Unless you actually approve the addition of a cert to this list, they are all good and approved by MS (ha, don't let that scare you...).

The only way a cert could allow programs to reinstall without prompting is if you first said 'Yes' to install software and checked the box to 'Always allow from this company'. In general, you never want to check that box unless you are familiar with the company and what they provide.

Jim

BT17R

Thanks Jim! If I delete all the Certificates except for MS, will that cause any problems with stuff already installed or needed to run apps on board now? I don't remember if I checked the box you mentioned, so to be safe I'm thinking to delete all, maybe even MS, to be safe?

jruz

Actually, I think I may have mixed up a couple things. The more I think about it...the certificates are a very different thing than just the browser's install routine.

Whenever you go to a site that has SSL enabled (you'd see a little gold padlock on the bottom bar of IE), it checks that certificate against this list of trusted root servers. If the cert is from one of the root servers, it will contact that server and verify the cert (if bad, it will warn you; if good, you won't see a thing). If no server matches, it will ask you if you'd like to trust that website's security.

All in all, I don't believe there is anything bad they can do by just enabling SSL (other than give you a false sense of security). In general I would advise against deleting those trusted / root certs...it would probably just cause some headache down the road.

Jim