Avast’s Man In The Middle

[Netguy101]

@Sanya IV Litvyak post:20

Are you sure about that? I can’t see any of that, are you sure you don’t mean PrivDog?

When you run certmgr.msc and head to “Trusted Publishers”, it’s normally empty, but I see “Comodo Security Solutions” certs there.

[SanyaIV]

@Netguy101 post:21

When you run certmgr.msc and head to “Trusted Publishers”, it’s normally empty, but I see “Comodo Security Solutions” certs there.

Ah, now I found them, dunno what they are about.

[JoWa]

That is about code-signing (as you can see in certmgr.msc).

Documentation:
Manage Trusted Publishers
Signature Categories and Driver Installation

On my virtual W7 I have Oracle Corporation there, as VirtualBox Guest Additions Service is installed.

[khanyash]

@JoWa post:19

If you go to https://www.google.com/

With Avast’s HTTPS scanning: https://static.avast.com/support/kb/images/v2015/avkb191/en/gc_https_certificate.png

Without Avast’s HTTPS scanning: https://static.avast.com/support/kb/images/v2015/avkb191/en/gc_https_srv_certificate.png

I checked certmgr.msc & all the categories under it, no avast there.
I have uninstalled Avast so guess uninstall removes certs too.

Does unchecking HTTPS scan in Avast removes certs & enabling installs certs again?

[Citizen_K]

@Sanya IV Litvyak post:13

To go further off-topic I’d like to say that post count doesn’t necessarily say anything about one has seen and hasn’t seen on the forums, for example there are certain sub-forums and specific threads that I avoid for example… … Told ya it was off-topic, you may give me a warning.

Consider yourself warned and don’t respond to this other than by following How to appeal against Moderators decisions.

[SanyaIV]

@JoWa post:23

That is about code-signing (as you can see in certmgr.msc).

Documentation:
Manage Trusted Publishers
Signature Categories and Driver Installation

On my virtual W7 I have Oracle Corporation there, as VirtualBox Guest Additions Service is installed.

So I’m assuming it’s all fine then, nothing out of the ordinary.

I also have OpenVPN in that list, and Certit PTY LTD… I don’t know what that last one is, any ideas?

@EricJH post:25

Consider yourself warned and don’t respond to this other than by following How to appeal against Moderators decisions.

Okie~

[lugo_58]

@yessnooo post:16

How to check certs?

And Avast uninstall will remove certs too, right?

No need to Avast Uninstall. Just uncheck the “HTTPS Scanning Feature” in settings or remove the WebShield component only.