Windows 2000 certificates disappeared

[Guest]

We have 6 machines on our network that started running WFP on boot up all the
time earlier this week. After much troubleshooting, we found that the cause
was that all the certificates were gone. We have since found out how to
reimport those certificates and the machines are now running ok. My question
is how did these get deleted in the first place. Two of the machine simply
run processes so no user is around to be deleting files. We have scanned for
viruses and spyware. Spyware was found on a couple of the machines but not
all. Has anyone else seen this? I saw one other post on this but no post as
to the cause.
Thanks
Mike

 

[David Cross [MS]]

Which certificates specifically have been deleted? from which store?

--
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.

Top Whitepapers:

Auto-enrollment whitepaper:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/autoenro.mspx
Best Practices for implementing Windows Server 2003 PKI:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws3pkibp.mspx
Troubleshooting Certificate Status and Revocation whitepaper:
http://www.microsoft.com/technet/security/topics/crypto/tshtcrl.mspx
Windows Server 2003 web enrollment and troubleshooting guide:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/webenroll.mspx
Windows Server 2003 web enrollment and troubleshooting guide:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/webenroll.mspx