what is addcertificate exe

emmjay · 12. Jul 2011, 06:28 PM

I noticed that a new program auto downloaded onto my computer today when I got onto the internet. It is addcertificate.exe and when I googled it I could not find a location that had a good wot rating so I could read about it. SBIE caught it, so I deleted it. I opened my mail and it re-downloaded...seems persistent! MSE did not boot it out. I do not recall having seen it before.

Has anybody else came across this auto download?

Sope · 12. Jul 2011, 07:33 PM

I did I quick search for it but only really found one site that mentioned it, and that was red WOT rated and didn't offer any useful info in any case.

Sounds suspect though if it is automatically downloaded when you open your mail!

Have you installed anything new recently, or received an email from someone you either don't know or someone you do know that could have been compromised??

wdhpr · 12. Jul 2011, 08:25 PM

Curious. I looked as well and there was only two links that addressed addcertificate.exe (one word) http://www.tomshardware.com/forum/13...il-certificats This site mostly referred to PDAs and it also appeared to want money to ask an expert. . And the other xraymypc[DOT]com has a RED wot rating.

I found quite a few links for add certificate (two words) and they also seemed to refer to mobile devices. I think Jojoyee has allot of experience with PDAs maybe you can PM him about it.

Sope · 12. Jul 2011, 09:19 PM

The OP on this page - http://www.bleepingcomputer.com/forums/topic397844.html - has addcertificate.exe as part of something called "PC Doctor".
Appears to be something to do with it's update?

Ring any bells?

wdhpr · 13. Jul 2011, 12:45 AM

Quote:

Originally Posted by Sope

The OP on this page - http://www.bleepingcomputer.com/forums/topic397844.html - has addcertificate.exe as part of something called "PC Doctor".
Appears to be something to do with it's update?

Ring any bells?

Although I hardly use Windoze anymore, my son uses Vista and he had a problem similar to that of the first poster. He couldn't scan or update his AV. It took some time for me to sort things out.
What I'm wondering is, if the PC Doctor file addcertificate.exe caused any problems. I don't think it had anything to do with my sons problems.

Sope · 13. Jul 2011, 11:55 AM

Quote:

Originally Posted by wdhpr

Although I hardly use Windoze anymore, my son uses Vista and he had a problem similar to that of the first poster. He couldn't scan or update his AV. It took some time for me to sort things out.
What I'm wondering is, if the PC Doctor file addcertificate.exe caused any problems. I don't think it had anything to do with my sons problems.

Yeah, I don't think that individuals problems were necessarily caused by PC Doctor, but if it's installed on your PC then that may account for the mysterious activity related to addcertificate.exe? Just a thought.

emmjay · 13. Jul 2011, 05:44 PM

Tnx guys for trying to help out on this.
I do have PC Doctor installed. Never seen it auto-download anything before ... the appl. has a message bar in that pops up if updates are available so I had no idea that this exe was from PC Doctor. I'll check out their website, maybe I can get more info on it. Odd that they would send an auto-download in this fashion.

Just to clarify, the exe auto downloaded when I started my internet connection. I deleted it and as I was opening my mail application it auto-downloaded again (it was not in my mail). I thought maybe it was associated with my mail application.

emmjay · 15. Jul 2011, 06:16 PM

Update: I contacted the PC Doctor forum and they tell me that addcertificate.exe is not from them. They do not send anything to auto-download. They suggest that it might be malware.

Today it popped up again ... SBIE keeps trapping it.

Sope · 15. Jul 2011, 07:35 PM

So which program are you running and what are you doing in the sandbox when this happens?

When you say SBIE traps it what is actually happening and what is alerting you to it's presence?

If you think addcertificate.exe is somewhere on your system have you tried doing a search of all the files, including hidden ones, on your HDD to see if you can find it's location?

A screenshot of the "pop-up" might help someone identify what's happening?

Sope · 15. Jul 2011, 08:06 PM

Ok, I'll have another shot at it...

Is your PC a Dell by any chance?

The only reference I can find to addcertificate.exe is in the following line (from someones OTL log):-

(PC-Doctor, Inc.) -- C:\Documents and Settings\Owner\Application Data\PCDr\Update\Rules\cd028268-d2f1-4a68-aeef-f0d47c42b6c9\DellSignedAppUpdaterRules\AddCertific ate.exe

Do you have something similar to this located on your PC?

12. Jul 2011, 06:28 PM	#1 (permalink)
emmjay Senior Member Join Date: Dec 2009 Posts: 226	what is addcertificate exe I noticed that a new program auto downloaded onto my computer today when I got onto the internet. It is addcertificate.exe and when I googled it I could not find a location that had a good wot rating so I could read about it. SBIE caught it, so I deleted it. I opened my mail and it re-downloaded...seems persistent! MSE did not boot it out. I do not recall having seen it before. Has anybody else came across this auto download?

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

12. Jul 2011, 07:33 PM	#2 (permalink)
Sope Senior Member Join Date: Feb 2009 Location: Wales, UK Posts: 809	I did I quick search for it but only really found one site that mentioned it, and that was red WOT rated and didn't offer any useful info in any case. Sounds suspect though if it is automatically downloaded when you open your mail! Have you installed anything new recently, or received an email from someone you either don't know or someone you do know that could have been compromised??

12. Jul 2011, 08:25 PM	#3 (permalink)
wdhpr Senior Member Join Date: Sep 2008 Location: The north Coast Posts: 1,117	Curious. I looked as well and there was only two links that addressed addcertificate.exe (one word) http://www.tomshardware.com/forum/13...il-certificats This site mostly referred to PDAs and it also appeared to want money to ask an expert. . And the other xraymypc[DOT]com has a RED wot rating. I found quite a few links for add certificate (two words) and they also seemed to refer to mobile devices. I think Jojoyee has allot of experience with PDAs maybe you can PM him about it.

12. Jul 2011, 09:19 PM	#4 (permalink)
Sope Senior Member Join Date: Feb 2009 Location: Wales, UK Posts: 809	The OP on this page - http://www.bleepingcomputer.com/forums/topic397844.html - has addcertificate.exe as part of something called "PC Doctor". Appears to be something to do with it's update? Ring any bells?

13. Jul 2011, 05:44 PM	#7 (permalink)
emmjay Senior Member Join Date: Dec 2009 Posts: 226	Tnx guys for trying to help out on this. I do have PC Doctor installed. Never seen it auto-download anything before ... the appl. has a message bar in that pops up if updates are available so I had no idea that this exe was from PC Doctor. I'll check out their website, maybe I can get more info on it. Odd that they would send an auto-download in this fashion. Just to clarify, the exe auto downloaded when I started my internet connection. I deleted it and as I was opening my mail application it auto-downloaded again (it was not in my mail). I thought maybe it was associated with my mail application.

15. Jul 2011, 06:16 PM	#8 (permalink)
emmjay Senior Member Join Date: Dec 2009 Posts: 226	Update: I contacted the PC Doctor forum and they tell me that addcertificate.exe is not from them. They do not send anything to auto-download. They suggest that it might be malware. Today it popped up again ... SBIE keeps trapping it.

15. Jul 2011, 07:35 PM	#9 (permalink)
Sope Senior Member Join Date: Feb 2009 Location: Wales, UK Posts: 809	So which program are you running and what are you doing in the sandbox when this happens? When you say SBIE traps it what is actually happening and what is alerting you to it's presence? If you think addcertificate.exe is somewhere on your system have you tried doing a search of all the files, including hidden ones, on your HDD to see if you can find it's location? A screenshot of the "pop-up" might help someone identify what's happening?

15. Jul 2011, 08:06 PM	#10 (permalink)
Sope Senior Member Join Date: Feb 2009 Location: Wales, UK Posts: 809	Ok, I'll have another shot at it... Is your PC a Dell by any chance? The only reference I can find to addcertificate.exe is in the following line (from someones OTL log):- (PC-Doctor, Inc.) -- C:\Documents and Settings\Owner\Application Data\PCDr\Update\Rules\cd028268-d2f1-4a68-aeef-f0d47c42b6c9\DellSignedAppUpdaterRules\AddCertific ate.exe Do you have something similar to this located on your PC?