If you are receiving errors when you try to install or run a security program that states The publisher has been blocked from running software on your machine, then you are most likely infected with the CertLock Trojan. This Trojan will add a variety of security vendors certificates to a Disallowed list so that Windows will not allow executables that use these certificates to run.
When installed, this Trojan will make it so Windows will not run any programs that are signed with certain certificates by adding the certificates to the HKLM\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates\ Registry key. Once added to that key, when a user tries to execute a program that utilizes a blocked certificate, Windows will issue the “The publisher has been blocked from running software on your machine” error and not allow the program to run.
The current security vendors that are blocked include AVAST, AVG, Adaware, Avira, Bitdefender, BullGuard, CURIOLAB, Check Point Software, Comodo, Doctor Web Ltd, ESET, Emsisoft, F-Secure, FRISK, GData, K7, Kaspersky Lab, Malwarebytes, McAfee, PC Tools, Panda, SUPERAntiSpyware, Safer Networking, Symantec, ThreatTrack Security, Total Defense, Trend Micro, and Webroot.
As there will not be an outward indication that this Trojan is installed, you will need to rely on exhibited symptoms to determine if you are infected. These symptoms are:
- When attempting to launch or install a security program you will receive an error that states The publisher has been blocked from running software on your machine.
- When starting MalwareBytes you will receive an error that states Unable to connect the Service or Runtime Error (at 49:120): Could not call proc.
- Your computer may act slower due to the installation of cryptocurrency mining program that is bundled with CertLock.
How was the CertLock Trojan installed on my computer?
CertLock is bundled with free programs that did not adequately disclose that other software would be installed along with it. Therefore, it is important that you pay close attention to license agreements and installation screens when installing anything off of the Internet. If an installation screen offers you Custom or Advanced installation options, it is a good idea to select these as they will typically disclose what other 3rd party software will also be installed. Furthermore, If the license agreement or installation screens state that they are going to install a toolbar or other unwanted adware, it is advised that you immediately cancel the install and not use the free software.
CertLock is definitely not something you want on your computer. As this program purposely tries to prevent you from installing security programs, I strongly suggest you use the guide below to remove it for free.
Your computer should now be free of the The publisher has been blocked from running software Alert program. If your current security solution allowed this program on your computer, you may want to consider purchasing the full-featured version of Zemana AntiMalware to protect against these types of threats in the future.
If you are still having problems with your computer after completing these instructions, then please follow the steps outlined in the topic linked below: