RCC (RootCertificateCheck) is a tiny console tool that is really good at highlighting potentially suspicious root CAs on your system. I think I haven't seen something similar before and thought I would share it here (yeah, as my first post!)
Ongoing thread at Wilders: http://www.wilderssecurity.com/threads/rcc-check-your-systems-trusted-root-certificate-store.373819/
However the app is extremely simple at this stage, and on-demand only. Do you know of other products that are able to protect the root certificate store? Probably the big boys such as Norton, McAfee, etc?
Disclaimer: The developer is a friend of mine.
Edited by girioni, 08 March 2015 - 02:26 PM.