Fraudulent Microsoft Certificate

  • Thread starter Thread starter Jason
  • Start date Start date
J

Jason

I am experieincing an issue with a Windows XP Machine that
appears to have fraudulent Microsoft Certificates. But I
have not been able to find any Microsoft article or
information purtaining to Windows XP and this issue.

Can someone please point me in the right direction.

Thank you;
 
Our offices' Firewall/Security Appliance has the ability
to monitor for that type of traffic and has caught the
machine in question (repeatedly) with a Fraudulent
Microsoft Certificate Alert. Of the XP based systems on
the Network only this machine generates the alert.
 
That has no bearing on the issue whatsoever. It is a legal
version that was bundled with the Dell Laptop.
 
If you have checked that the Certificate is authentic, then I don't know why
you are seeing the alert.
 
Maybe this will help clarify things. the Fraudulent
certificate tries to communicate with the Verisign Servers.
 
Verisign issued a couple fradulent Microsoft certs a few years ago.

They are listed in certmgr.msc under Untrusted Certificates.
 
I have found the patch for the ones you are refering to.
The patch however is only listed as being for Windows
Versions up to Pre-SP2 Windows 2000. Nothing for Windows
XP.

-----Original Message-----
Verisign issued a couple fradulent Microsoft certs a few years ago.

They are listed in certmgr.msc under Untrusted Certificates.

--

Ken Wickes [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.


Jason said:
I am experieincing an issue with a Windows XP Machine that
appears to have fraudulent Microsoft Certificates. But I
have not been able to find any Microsoft article or
information purtaining to Windows XP and this issue.

Can someone please point me in the right direction.

Thank you;


.
 
WinXP probably shipped with the bad certs disabled.

--

Ken Wickes [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.


Jason said:
I have found the patch for the ones you are refering to.
The patch however is only listed as being for Windows
Versions up to Pre-SP2 Windows 2000. Nothing for Windows
XP.

-----Original Message-----
Verisign issued a couple fradulent Microsoft certs a few years ago.

They are listed in certmgr.msc under Untrusted Certificates.

--

Ken Wickes [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.


Jason said:
I am experieincing an issue with a Windows XP Machine that
appears to have fraudulent Microsoft Certificates. But I
have not been able to find any Microsoft article or
information purtaining to Windows XP and this issue.

Can someone please point me in the right direction.

Thank you;


.
 
Ok. Then what can one do to correct it so that the bad
certs are either removed or no longer active.


-----Original Message-----
WinXP probably shipped with the bad certs disabled.

--

Ken Wickes [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.


Jason said:
I have found the patch for the ones you are refering to.
The patch however is only listed as being for Windows
Versions up to Pre-SP2 Windows 2000. Nothing for Windows
XP.

few
years ago. and
confers no rights.


.
 
Have you verified that the bad certs you found are the bad ones described in
the KB?

--

Ken Wickes [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.


Ok. Then what can one do to correct it so that the bad
certs are either removed or no longer active.


-----Original Message-----
WinXP probably shipped with the bad certs disabled.

--

Ken Wickes [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.


Jason said:
I have found the patch for the ones you are refering to.
The patch however is only listed as being for Windows
Versions up to Pre-SP2 Windows 2000. Nothing for Windows
XP.


-----Original Message-----
Verisign issued a couple fradulent Microsoft certs a few
years ago.

They are listed in certmgr.msc under Untrusted
Certificates.

--

Ken Wickes [MSFT]
This posting is provided "AS IS" with no warranties, and
confers no rights.


I am experieincing an issue with a Windows XP Machine
that
appears to have fraudulent Microsoft Certificates. But I
have not been able to find any Microsoft article or
information purtaining to Windows XP and this issue.

Can someone please point me in the right direction.

Thank you;


.


.
 
My firewall seems to think they are.

There were only 2 systems on our network that had this
issue. 1 was Windows 2000 (the patch rectified the
Problem) and the 2nd is Windows XP which according to the
information in the knowledge base has no patch available
for it.

As for verifying this; what is the process for Windows XP.
Is it the same as Windows 2000. If so why don't any of the
KB articles state that Windows XP is included.
-----Original Message-----
Have you verified that the bad certs you found are the bad ones described in
the KB?

--

Ken Wickes [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.


Ok. Then what can one do to correct it so that the bad
certs are either removed or no longer active.


-----Original Message-----
WinXP probably shipped with the bad certs disabled.
and
confers no rights.
I have found the patch for the ones you are refering to.
The patch however is only listed as being for Windows
Versions up to Pre-SP2 Windows 2000. Nothing for Windows
XP.


-----Original Message-----
Verisign issued a couple fradulent Microsoft certs a few
years ago.

They are listed in certmgr.msc under Untrusted
Certificates.

--

Ken Wickes [MSFT]
This posting is provided "AS IS" with no warranties, and
confers no rights.


I am experieincing an issue with a Windows XP Machine
that
appears to have fraudulent Microsoft Certificates. But I
have not been able to find any Microsoft article or
information purtaining to Windows XP and this issue.

Can someone please point me in the right direction.

Thank you;


.



.


.
 
I would think because since the bad certs are known to XP that the KB
article doesn't include it because there is nothing for the user to do.

--

Ken Wickes [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.


Jason said:
My firewall seems to think they are.

There were only 2 systems on our network that had this
issue. 1 was Windows 2000 (the patch rectified the
Problem) and the 2nd is Windows XP which according to the
information in the knowledge base has no patch available
for it.

As for verifying this; what is the process for Windows XP.
Is it the same as Windows 2000. If so why don't any of the
KB articles state that Windows XP is included.
-----Original Message-----
Have you verified that the bad certs you found are the bad ones described in
the KB?

--

Ken Wickes [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.


Ok. Then what can one do to correct it so that the bad
certs are either removed or no longer active.



-----Original Message-----
WinXP probably shipped with the bad certs disabled.

--

Ken Wickes [MSFT]
This posting is provided "AS IS" with no warranties, and
confers no rights.


I have found the patch for the ones you are refering to.
The patch however is only listed as being for Windows
Versions up to Pre-SP2 Windows 2000. Nothing for Windows
XP.


-----Original Message-----
Verisign issued a couple fradulent Microsoft certs a
few
years ago.

They are listed in certmgr.msc under Untrusted
Certificates.

--

Ken Wickes [MSFT]
This posting is provided "AS IS" with no warranties,
and
confers no rights.


I am experieincing an issue with a Windows XP Machine
that
appears to have fraudulent Microsoft Certificates.
But I
have not been able to find any Microsoft article or
information purtaining to Windows XP and this issue.

Can someone please point me in the right direction.

Thank you;


.



.


.
 
Back
Top