This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(217.60000000000002, 68%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELT%3C/text%3E%3C/svg%3E)
want to know more about how this malware, Trojan:Win32/Cerdigent.A!dha try to infect my pc
Additional Microsoft Defender tools and services that provide security across various platforms and environments
False positive how so? Some SPAM emails happened to have patterns matching that particular virus? The alarm went up 3 times. Also, why restore the items? And why TWO items. The third time, there was only one item (rootcert). What is a rootcert? A virus signature pattern?
Windows Security was detecting two DigiCert public root CAs as Trojan:Win32/Cerdigent.A!dha — thumbprints:
DDFB16CD4931C973A2037D3FC83A4D7D775D05E4 (DigiCert Trusted Root G4) 0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43 (DigiCert Assured ID Root CA)
You can manually inspect both certificates as they are present on all Windows 10 and 11 computers. To do so, open the run box (Win + R) and run certmgr.msc > expand Trusted Root Certification Authorities
https://www.techbloat.com/how-to-manage-trusted-root-certificates-in-windows.html
It was a false positive. Run Windows Update to get Microsoft Security definition version 1.449.430.0 or a later version and if removed, restore the two items from quarantine.