Malware will often try to block security software from running, and one of the ways it does this is by adding their code signing certificate to Windows’ Untrusted list. If you try to run a program with an untrusted certificate, Windows displays a message like "this program has been blocked for your protection", or "an administrator has blocked you from running this program." (These messages can also appear for other reasons.) AdwCleaner and Malwarebytes developer Jerome Boursier has released AVCertClean, a basic but effective tool to scan the Untrusted Certificate list, and remove any items which belong to trusted antivirus…
[Continue Reading]