JSI Tip 3514. Have you accepted a fraudulent Microsoft digital certificate?

Verisign, Inc. announced that they had issued two digital certificates to an individual claiming to be a Microsoft employee.

When you encounter these certificates, pressing Always trust content from Microsoft Corporation adds them to the list of trusted publishers.

You can remove this trust, by pressing Internet Options, on the Tools menu for IE 5.x, or the View menu for IE 4.x. On the Content tab, press Publishers. Select Microsoft Corporation, press Remove and OK.

NOTE: If Microsoft Corporation is listed more than once, there is no way to determine which one to remove, without the following registry hack:

1. Use Regedt32 to navigate to:

    HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionWinTrustTrust ProvidersSoftware PublishingTrust Database

2. If one or more of the following values exist, delete them:

    bhhphijojgfcdocagmhjgjbhmieinfap pnkllbeoaimhfgpfonehpajhppeaaohf

    bhhphijojgfcdocagmhjgjbhmieinfap gkjjdhegecmnfejcjmdjcedhphjafbbl