• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs

Not what you are looking for? Ask the experts!

This forum thread needs a solution.

Resolving an expired Microsoft Authenticode certificate on Windows 7?

I have a Windows 7 HP laptop and got a call from some Indian guy seemingly wanting to sell me some unneeded software or service.  He had me pull up a cmd window, run certmgr and look at the Trusted Root Certificates to which I found 2 Microsoft certificates of Microsoft Corp and Microsoft Authenticode Root Authority had expired on 12/30/1999 and 12/31/1999 respectively.  This was odd since most of other certs were all in valid dates.  He claimed that my system had been hacked and that this was the result of the invasion. 

Is his claim true?

Does Norton Internet Security check for these issues and how does one update the certificates to be valid?

My system was recently reinstalled in the last 2 months and is current with all important MS Updates.

Thanks, Ken.


Kudos1 Stats

Re: Resolving an expired Microsoft Authenticode certificate on Windows 7?

That was a scammer call. No one outside your home network can know what is on your system. The command he gave you to run probably listed all certificates found on your system. If you have been using it for some time, there are probably some expired certificates that have been replaced with new ones.Even a fresh Windows install could install older certificates that would be updated by Windows Updates. They just do not get removed from your system. They cause no problems just sitting there. Running that command on my system shows 4 expired certificates. My system is not infected. 

Did he then offer to log into your computer to fix things for a fee? That is the usual method of operation for these scammers. If they gain access to your computer, they can then install malware that might steal your personal information.

If you did allow remote access to your computer, you will need to run some scans to ensure nothing was left behind. Start with a full system scan with your Norton product. Then I would suggest a second opinion scan using the FREE version of Malwarebytes. You can find it here https://www.malwarebytes.com/premium/   If you wish, you can disable the Premium version trial to use the product as an on demand scanner by using the instructions here.  https://support.malwarebytes.com/docs/DOC-1033

Things happen. Export/Backup your Norton Password Manager data.

Re: Resolving an expired Microsoft Authenticode certificate on Windows 7?

Thanks for the info.  Yes I did figure he was a scammer and No I did not nor ever would I let him have access to my computer w/o a bit more substantial evidence that he might be legitimate than just a hard accent over the phone.  All that said, I did think it was curious to see some out of date MS certificates which was my concern. 

Thanks for the feedback and the recognition that it is probably not a major issue.  I will still check on the MS forums to see if there are any easy fixes just to get the certs to valid dates if possible and relevant.

Thanks again, 


This thread is closed from further comment. Please visit the forum to start a new thread.