解决卡巴斯基劫持系统证书问题

目前使用的 Windows 桌面环境杀毒软件更换为 Kaspersky （卡巴斯基），结果在使用过程中发现一个问题。

问题

安装卡巴斯基后大部分网站的证书被卡巴斯基劫持，更换为卡巴斯基的自签名证书，如下图所示。

可见根证书被劫持为 Kaspersky Anti-Virus Personal Root Certificate

解决

参考卡巴斯基知识库可知，这是卡巴斯基的「加密连接扫描」功能导致的。

英文版

Enabling and disabling encrypted connections scan
To enable or disable encrypted connections scan:
In the main application window, click the Settings button.
In the left part of the window, in the General settings section, select the Network settings subsection. The network settings are displayed in the right part of the window.
In the right part of the window, in the Encrypted connections scan section, perform one of the following actions:
Select the Scan encrypted connections check box if you want Kaspersky Endpoint Security to monitor encrypted network traffic.
Clear the Scan encrypted connections check box if you do not want Kaspersky Endpoint Security to monitor encrypted network traffic.
To save changes, click the Save button.

中文版

打开主界面，点击左下角的齿轮「设置」。
可见根证书被劫持为 Kaspersky Anti-Virus Personal Root Certificate
解决
参考卡巴斯基知识库可知，这是卡巴斯基的「加密连接扫描」功能导致的。
英文版
Enabling and disabling encrypted connections scan
To enable or disable encrypted connections scan:
1. In the main application window, click the Settings button.
2. In the left part of the window, in the General settings section, select the Network settings subsection. The network settings are displayed in the right part of the window.
3. In the right part of the window, in the Encrypted connections scan section, perform one of the following actions:
  - Select the Scan encrypted connections check box if you want Kaspersky Endpoint Security to monitor encrypted network traffic.
  - Clear the Scan encrypted connections check box if you do not want Kaspersky Endpoint Security to monitor encrypted network traffic.
4. To save changes, click the Save button.
中文版
1. 打开主界面，点击左下角的齿轮「设置」。
  可见根证书被劫持为 Kaspersky Anti-Virus Personal Root Certificate
  解决
  参考卡巴斯基知识库可知，这是卡巴斯基的「加密连接扫描」功能导致的。
  英文版
  Enabling and disabling encrypted connections scan
  To enable or disable encrypted connections scan:
  1. In the main application window, click the Settings button.
  2. In the left part of the window, in the General settings section, select the Network settings subsection. The network settings are displayed in the right part of the window.
  3. In the right part of the window, in the Encrypted connections scan section, perform one of the following actions:
    - Select the Scan encrypted connections check box if you want Kaspersky Endpoint Security to monitor encrypted network traffic.
    - Clear the Scan encrypted connections check box if you do not want Kaspersky Endpoint Security to monitor encrypted network traffic.
  4. To save changes, click the Save button.
  中文版
  1. 打开主界面，点击左下角的齿轮「设置」。