what is addcertificate exe

[Sope]

I should have added that from that line it seems to me that PC Doctor has created some rules which refer to addcertificate.exe being related to something called the Dell App Updater???

(please read this in conjunction with my preceeding post)

[emmjay]

Originally Posted by Sope

So which program are you running and what are you doing in the sandbox when this happens?

When you say SBIE traps it what is actually happening and what is alerting you to it's presence?

If you think addcertificate.exe is somewhere on your system have you tried doing a search of all the files, including hidden ones, on your HDD to see if you can find it's location?

A screenshot of the "pop-up" might help someone identify what's happening?

Hi Scope, thanks for hanging in there with me.

The first time it happened the only thing running was my internet connection, W/FW and MSE real time. I did not have any applications opened. A pop-up appeared from SBIE stating that addcertificate.exe had just been downloaded to my HDD and will run sandboxed. I did not see anything open or change, so I did a file search on the exe and could not find it. I emptied the sandbox to get rid of everything there. After that I opened my mail application and the popup reappeared with the same message. As my mail appl. was still opening it was difficult to determine if the exe was executing. I checked system events ... no indication there. I ran quick scan with MSE and then with MBAM. No hits.

The pop-up does not stay for long. If I can get a screen shot in, I will do that.

NB: I use w7/32, so I do not know how to do a file search on hidden files (different from XP).

[emmjay]

Originally Posted by Sope

Ok, I'll have another shot at it...

Is your PC a Dell by any chance?

The only reference I can find to addcertificate.exe is in the following line (from someones OTL log):-

(PC-Doctor, Inc.) -- C:\Documents and Settings\Owner\Application Data\PCDr\Update\Rules\cd028268-d2f1-4a68-aeef-f0d47c42b6c9\DellSignedAppUpdaterRules\AddCertific ate.exe

Do you have something similar to this located on your PC?

Oops missed this one ...
I have a Lenovo Thinkpad. Ahhhh, found it in the registry. It is currently in the FIle Tag of SBIE with a ton of other exe files. It is under appupdater.exe and close to what you pointed me to. Yes it references PCDR.
Tnx Scope.

[Sope]

Originally Posted by emmjay

I use w7/32, so I do not know how to do a file search on hidden files (different from XP).

I don't find Windows 7 search very intuitive to use either.

Looks like this webpage explains how to search hidden files and folders -

There is only one way to do it, Select the option Show hidden files from folder options and then search for the files using the start search box.
1. Click Start.
2. Type "search" in start search box.
3. click "Change search options for files and folders".
4. Now, Click on View tab .
5. Under View,
a)Select the radio button labeled Show hidden files, folders, and drives
b)Remove the checkmark from the checkbox labeled Hide extensions for known file types.
c)Remove the checkmark from the checkbox labeled Hide protected operating system files.
6. Click on Apply and Ok.

I think Everything might be a better tool for the job though.

Originally Posted by emmjay

Oops missed this one ...
I have a Lenovo Thinkpad. Ahhhh, found it in the registry. It is currently in the FIle Tag of SBIE with a ton of other exe files. It is under appupdater.exe and close to what you pointed me to. Yes it references PCDR.
Tnx Scope.

Anyway, it sounds like the mystery is solved then?
Presumably it checks out as being legit?

[kendall.a]

If you don't like Windows Search (I happen to like it), then let me put in a shameless plug for my article on this topic:

http://www.techsupportalert.com/best...ch-utility.htm

[emmjay]

Originally Posted by Sope

Anyway, it sounds like the mystery is solved then?
Presumably it checks out as being legit?

Hi Scope,

I got more feedback from PC Doctor .... it is ligit and yes this file is from them. The moderator checked into my inquiry further and says that addcertificate.exe is used to install a certificate in PCDr. He said it is a relatively new addition and he did not recognise it at first. Solved!

And a big tnx to Kendall for info on W7 search/hidden files ... good to know.

[Sope]

Nice one.
Glad you got it sorted.