Page 1 of 2

A Paypal Certificate pops up when going to slyck.com - Why?

PostPosted: Wed Oct 12, 2005 8:43 pm
by NoOneButMe
Is there any particular reason that i recieved a paypal server certificate when i went to slyck.com? I didnt click on the "donate" button - It popped up when i went to the homepage right after typing "slyck.com" in my browser. And no, i dont have a spyware or virus program - scanned with Ad-Aware SE 1.06, Spybot S&D(whatever newest version is), and Hijack This, as well as F-Secure and didnt find malware of any kind, nor did this window pop up on any other websites.
Image
I was under the impression that slyck didnt have any sort of malware on its site. If thats so, and the problem isnt on my end - Why did this pop up?

PostPosted: Wed Oct 12, 2005 8:53 pm
by zbeast
I think its only you.
I contact slick from multiple IP's on multiple mashines for multiple months all day long and I have never seen anything like that.

Looks like spyware to me. does it have your name as the sender or is it asking you to log on?

I'm just being curious.
I dont work for slick forms I'm just another user.

PostPosted: Wed Oct 12, 2005 8:56 pm
by NoOneButMe
Odd that its only me. But that screenshot has the same window that pops up every time i go to slyck.com. No more info then that.

And i doubt its spyware - ran a scan and didnt find anything.

PostPosted: Wed Oct 12, 2005 8:58 pm
by fiveliterbtr
O_o Is there any particular reason why you are living in the netherworld on Feb 23, 2004? :lol: Sorry, had to ask...and nothing pops up here either, btw.

PostPosted: Wed Oct 12, 2005 8:59 pm
by NoOneButMe
My bios battery is nearly dead <_< and keeps resetting itself and i havent bothered changing the time back to where it should be at :p

Time to add that to the to-do list(buy a new battery for mobo)

PostPosted: Wed Oct 12, 2005 9:13 pm
by fiveliterbtr
Update your date and time, it may be screwing with an old certificate on your pc since your date is off.

EDIT: I know you're a Linux user...is that Linux or a skinned Windows?

PostPosted: Wed Oct 12, 2005 9:32 pm
by NoOneButMe
Windows, its a Windowblinds Skin.

I dont have any paypal certificates to start with so i dont see how the computer could be messing with old certificates - i reinstalled windows 3 months ago anyway, so there's no chance of something from 2004 being on my hdd - atleast not a certificate.

PostPosted: Wed Oct 12, 2005 9:35 pm
by SlyckTom
Check your system clock. what date are you showing?

PostPosted: Wed Oct 12, 2005 9:41 pm
by NoOneButMe
System Clock shows it as being 8:40 PM on Wednesday October 12th 2005.

PostPosted: Wed Oct 12, 2005 11:01 pm
by fiveliterbtr
What's so hard, fix teh clock! Any browser comes with certificates from VeriSign, etc. Firefox is probably set to check any certificates when a page loads...the donate button is connected to a certificate issued probably by VeriSign...the auto check sees that your date is before the date of the certificate and warns you that it's not yet valid, since your date is wrong...fix your date and all will be good.

paypal

PostPosted: Thu Oct 13, 2005 5:19 am
by chuck
Ive been getting it as well and my clock is fine.
the only thing ive installed is Objectdock free ware.
Thought that may have been it but after i run crap cleaner and flush my browser it will go away till the next time i visit.

PostPosted: Thu Oct 13, 2005 6:14 am
by Nick
Funny thing is, I got it myself for the first time yesterday.

Hasn't happened today, but I did a scan for ad/spyware and found nothing.

(battery fine btw)

PostPosted: Thu Oct 13, 2005 11:09 am
by zbeast
Oh, here's a guess. does slyck have java banner ad's
I'm asking because I cant see them. I block all ad server but the ads by google at the to of the screen

Theres a little hacking tricks you can do with banner ads to add refers to other sites.

This is just a guess. Ive seen banner ad's try and fool you into installing programs. I'm not blaming slick. This is the fault of the banner ad company taking an ad' from a bad user.

Log on to this web site and ask about this.
http://www.rootkit.com/

There was a story on how this type of thing is done but I dont have time to find the story.

Paypal

PostPosted: Thu Oct 13, 2005 3:21 pm
by chuck
I think you may be right i cut JavaScript off on my browsers till i go to a site i know and need it. And thinking back now ive had it on after a visit to one of my fav. sites.Stupid me i forgot to cut it back off.Its on now no more Paypal. Those ad people are good at what they do i guess.

PostPosted: Thu Oct 13, 2005 3:45 pm
by Nick
Nice one, Zbeast. I had java enabled in FF but not in IE. Tried comparing both, and you are right.

Good advice, thanks

PostPosted: Thu Oct 13, 2005 5:33 pm
by NoOneButMe
Thanks Zbeast .. that was it for me as well :)

PostPosted: Thu Oct 13, 2005 8:18 pm
by fiveliterbtr
You guys must be special...being the experimental person I am, I tried to force this Paypal popup. I've always had Java & Javascript enabled in FF, and made sure all options were checked...I disabled the built-in popup blocker...renamed my hosts file temporarily...no popup...the only way I got the popup was to change my Windows year to 2002.

Are you guys using the latest Firefox? Disabling Java/Javascript is not really the answer, just a bandage...if it's not the date, then it's an expired certificate. As I said before, every browser comes with certificates from Certificate Authorities like VeriSign, Entrust, etc. You don't have one for Paypal, it's the CA's that check the validity of a secure site with a certificate they store.

Sorry if I'm being annoying, I just like to find answers to problems, not cover them up. :wink:

PostPosted: Thu Oct 13, 2005 11:26 pm
by zbeast
Good work fiveliterbtr.
I was just making guess based on what I have seen in the past I was not willing to reconfig my computer to try to analyaze prob. Good find. Odd side effect.\

Thoe its still odd out of the three people that see this only one of them had the date trouble.

PostPosted: Fri Oct 14, 2005 3:04 pm
by NoOneButMe
Im using Firefox 1.07

PostPosted: Mon Oct 24, 2005 7:30 pm
by Iron
The only problem is your date. If you read the message it says the certificate isn't valid yet. It's not spyware, a javascript issue, or anything else.

PostPosted: Tue Oct 25, 2005 3:11 am
by LaX
He said his clock was correct though.

Nice skin btw

PostPosted: Tue Oct 25, 2005 5:07 am
by bmh67wa
OK, I just got it myself for the first time today. I use Avant Browser 10.1 build 30 (the latest), my clock is set right, and I have Java enabled. I left and came back several times and only got it the one time. This is indeed weird. :?

PostPosted: Tue Oct 25, 2005 5:30 am
by LaX
So it pops up randomly? I never got it with java and javascript enabled.

PostPosted: Tue Oct 25, 2005 2:13 pm
by Iron
If you look at his posted pic it says his time is 7:01pm February 23, 2004. So unless we've all stumbled across a thread that's 1.5 years old his clock is _not_ right.

PostPosted: Tue Nov 01, 2005 5:34 pm
by NoOneButMe
Iron wrote:If you look at his posted pic it says his time is 7:01pm February 23, 2004. So unless we've all stumbled across a thread that's 1.5 years old his clock is _not_ right.

That may be so - i explained that already. but it doesnt explain why it happened to members other then me. So please, before you make a point(however valid) look through and see if it was dealt with already or not. The Clock issue is a completely seperate issue, one that was resolved.