5
I was looking at my personal certificates in Google Chrome and found a bunch of DO_NOT_TRUST_FiddlerRoot certs there. I don't know how these got there. Should I be concerned?
neubert
Posted 2014-12-29T06:05:55.323
Reputation: 3 991
found a bunch of DO_NOT_TRUST_FiddlerRoot personal certificates installed on my system
Answers
3
Yes you should. In fact you should delete them. There's an adware that installs those certificates and injects encrypted HTML advertising content from various websites, hence SSL certificate.
To find more of your certificates:
Open mmc.exe --> crtl + M --> Certificates --> Click Add > --> My User account --> Click Finish --> Click OK
You also might want to run some or all of these:
- AdwCleaner
- Malwarebytes
- ComboFix
- CCleaner
- and finally an Anti-virus.
Update:
To make my answer more clear. If you have never installed Fiddler on your computer, chances are there's an Adware that installed the certificates.
From: https://www.telerik.com/fiddler/fiddlercore
What is Telerik FiddlerCore?
Progress® Telerik® FiddlerCore Embedded Engine is a .NET Class library you can integrate into your .NET Framework applications. There is also a .NET Standard 2.0 flavor of FiddlerCore that allows using it on any platform implementing .NET Standard.
Telerik FiddlerCore allows you to capture and modify HTTP and HTTPS traffic just like Fiddler, without any of the Fiddler UI.
Why Telerik FiddlerCore
Battle-tested code used by millions of users of the Fiddler application. Flexible licensing schemes for internal and public distribution. Ongoing support from the core development team. Key Features HTTP and HTTPS traffic capture and modification. Powerful object model for content filtering and modification. Store and reload web traffic. Support for virtually any client application. Support for most devices via mobile proxy settings.
Fiddler installs these certificates so it can capture and inspect encrypted Web traffic (for debugging).
In which case you should also check your Internet Proxy settings.
Additional links:
chx101
Posted 2014-12-29T06:05:55.323
Reputation: 171
As @heavyd stated, the Fiddler web debugging proxy will install them to debug SSL traffic. – Speerian – 2017-05-16T14:50:45.893
@heavyd Yes I know that but even Fiddler gives you a warning when installing them because malicious applications can use them since they get installed into your trusted store. Also, if you have never use Fiddler and found the certificates then the above applies. – chx101 – 2017-05-16T14:53:07.147
7
Have you ever installed the Fiddler web debugging proxy? It installs certs with that name in order to debug SSL traffic. If not, you should be able to delete them.
– heavyd – 2014-12-29T07:31:17.707