Anyone else having trouble with signing in on Ebay. I clear my history and cookies often so I have to sign freaquently. I keep getting a pop-up that says the security certificate has expired.

Anyone else or do I have some spyware trying redirect me to a scam site?

I was just on there 5 minutes ago, brb, just checked and I still can get on ;)

Yeah, I can view anything I want, but I was not signed in. When I tried to sign in it wouldn't let me . It acted as if it was trying to redirect me but my pop-up blocker wouldn't let it.

I ran a virus scan today and all was good. I better look for spyware now....:(

Best post I read today.EBAY has gone awry?

I was logged into ebay at least 10 times today, no problem. Were you trying it directly or from an email you received??

OK here Ken...not sure what is going on on your end??

get in touch with ebay imediately because your account my have been hijacked

i can sign on fine too ... i agree with cdowns ...get in touch with Fleabay FAST.

Were you trying it directly or from an email you received?? Oh, I "never" respond to, or click on links in any emails.

I cleared my browser history earlier today, and manually dumped all my cookies. When I tried to log on i would get a pop-up saying the security certificate was expired. When I tried to close the pop- up it would start flickering as if my pop-up blocker was trying to stop it from opening another window.

I rebooted and it seems to be working correctly now. I guess it didn't like it when I flushed the history files out....:crazy:

I just checked mine and hod no problems at all...


Chuck

Before you get freaked out, Do me a favor.

Make sure your system date and time is correct (look at the clock in the bottom left corner, double-click it, check the date)

Download HijackThis: http://216.180.233.162/~merijn/files/HijackThis.exe
Run it, choose "Scan and save logfile".

Copy and paste the logfile in a new thread.

I'll tell you if you've been hijacked.

Meanwhile, go to www.ewido.net and download Ewido - install the software, open it, choose UPDATE, then do a full scan. If you got anything that might hijack you like that, it *should* find it.

Shifty- The clock/date check out ok.
I can log in but I am getting the security certificate pop-up every time I try to log on


C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\mainserv.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\BCMSMMSG.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\McAfee.com\VSO\mcvsshld.exe
C:\WINDOWS\System32\NILaunch.exe
C:\program files\support.com\bin\tgcmd.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\Program Files\McAfee.com\VSO\oasclnt.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\PROGRA~1\SBCSEL~1\SMARTB~1\MotiveSB.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\Program Files\apcsystray.exe
C:\WINDOWS\System32\cidaemon.exe
C:\WINDOWS\System32\cidaemon.exe
C:\PROGRA~1\McAfee.com\Agent\mcagent.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Ken\My Documents\My Pictures\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\McAfee.com\Agent\McUpdate.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe
O4 - HKLM\..\Run: [DwlClient] C:\Program Files\Common Files\Dell\EUSW\Support.exe
O4 - HKLM\..\Run: [ZingSpooler] C:\Program Files\Common Files\Zing\ZingSpooler.exe
O4 - HKLM\..\Run: [Net-It Launcher] C:\WINDOWS\System32\NILaunch.exe
O4 - HKLM\..\Run: [tgcmdprovidersbc] "c:\program files\support.com\bin\tgcmd.exe" /server /startmonitor /deaf /nosystray
O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [PRISMSVR.EXE] "C:\WINDOWS\system32\PRISMSVR.EXE" /APPLY
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\SBCSEL~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [CleanUp] C:\PROGRA~1\McAfee.com\Shared\mcappins.exe /v=3 /cleanup
O4 - Global Startup: APC UPS Status.lnk = ?
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: Yahoo! Login - {2499216C-4BA5-11D5-BD9C-000103C116D5} - C:\Program Files\Yahoo!\Common\ylogin.dll
O9 - Extra 'Tools' menuitem: Yahoo! Login - {2499216C-4BA5-11D5-BD9C-000103C116D5} - C:\Program Files\Yahoo!\Common\ylogin.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\common\yinsthelper.dll
O16 - DPF: {78AEEDE8-7345-4FB5-A8FE-4BFF16EF25FC} (McAfee Virtual Technician Control Class) - http://mvt.mcafee.com/mvt/bin/3,0,1,0/mvt.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: APC UPS Service - American Power Conversion Corporation - C:\Program Files\mainserv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
O23 - Service: Intel(R) NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe

Ok, definitely not anything bad showing in there...nothing I can see, at least....

I assume McAfee would have found a virus too if you had one. There is a virus that has been running around lately that would cause problems accessing some places, but ...

The most common source for this problem you mention is the data (year, particularly) being wrong - like set to last year or next year or what have you - that way, it looks like the certificate has expired.

Do me a favor - can you click the "view certificate" button when you get the popup and tell me what the information says - for example,

This certificate has expired or is not yet valid.
Issued to: signin.ebay.com.au
Issued by: Secure Server Certification Authority
Valid from 13/07/2006 to 14/07 2007

Also, please tell me if the URL/website in the "issued to" field matches the URL/website in your browser's address bar.

I'll try to help you get to the bottom of this. You may want to do an online virus scan at Trend Micro's site juuuuust to be sure:

http://housecall.trendmicro.com

PS - I am going to leave you with this information also. Any time you have a Security Certificate, it means you're viewing a secure (SSL encrypted) website. All of your data is supposed to be encrypted. That popup only comes up when something is not right - typically. I want to share this with you, with the important points in bold:


Sites with URLs that start with "https://" are secure, which means two things: information you send to them is encrypted so that it can't be intercepted in route, and they have a certificate that proves they are who they say they are. A certificate is a unique cryptographic identifier which is issued by a Certificate Authority (CA). Every web browser comes with a list of trusted CAs, which is mostly the same from browser to browser. Anybody who wants to can call himself a CA and start issuing certificates, but they won't work for most people because his CA won't be listed in browsers.

For example, you go to log into EBay. You type "https://www.ebay.com/" into your browser, and some stuff happens behind the scenes before the page loads. The EBay web server presents your web browser with its certificate, your web browser checks to see who issued the certificate, and that it trusts that CA. If all goes well, you don't notice anything.

But let's say that you're plugged into an strange network - at a hotel, say, or a wireless hotspot. The person that runs the network is malicious and wants to capture your EBay login and password. He sets up the network so that when you type "https://www.ebay.com/" into your web browser, you get directed to his web server instead of EBay's. He has his own CA, and he's issued himself a certificate for the www.ebay.com domain name. The only way that you know anything is up is the warning your browser gives you, saying that it doesn't trust the CA that issued the certificate.

In the case of the specific site "cb1.msn.com", there seems to be a known problem. The certificate for that site was issued by the "Microsoft Secure Server Authority," which is trusted by Internet Explorer but not by Firefox or Safari. Most Microsoft sites, like https://login.passport.net/, use certificates issued by RSA Data Security, Inc., which is trusted by all major browsers. I don't know why they chose a less-supported CA for this one site.

Unfortunately, there's no good way you can safely visit the site without using Internet Explorer. Looking at the stuff under "Show Certificate > Details" isn't good enough - if you get a warning from your browser, anything listed there is potentially forged. The only time you can safely ignore SSL warnings is if you're not going to enter any sensitive information into the site.

Shifty, you are a genius and I am an idiot. You were correct with your diagnosis that the problem was the system date and time was set incorrectly on my computer.

When you asked me I went and looked and still didn't see that it was set for April instead of August :crazy: That explains the trouble I was having in Quickbooks. As a side note just for reference material this caused the "spell checker" on my Google toolbar to be inoperative as well.

As soon as I changed to the correct month all these problems went away. Shifty you are da man....:metal:

:thumbs:

Thanks a million buddy.....:metal:

You're always welcome, man. Any time ... that's what this forum is here for ...