Invalid security certificate

[priestlucas123]

I am seeing this at random times in Internet Explorer 11 on Windows 7 SP1, using free 12.1.2272; the only Avast components installed are the three shields and no other security software installed or running. Normally I would say it is a problem with the web site(s), but the certificate details show being issued from Avast.

[lukor]

Hi,
and is this happening on the same site all the times or on random sites. What about the certificates? Is that always this one, or is it random as well? (please watch for the "issued to" and valid from/to fields. Thanks a lot, lukas.

[polonus]

It seems the domain name BTRL.COM mentioned in that example is for sale.

polonus

[priestlucas123]

The last three instances have been exactly the same as screen shots, all from Yahoo Mail when viewing preview of Inbox.

I wasn't keeping track of other websites that generated message before this but will update as possible.

[priestlucas123]

Here is some more details captured in latest instance:

[Eddy]

https://apps.ghostery.com/en/apps/brightroll
As it is a advertising site, I suggest a good check for malware.
http://forum.avast.com/index.php?topic=53253.0

[ky331]

I am getting the same security certificate, issued to btrll.com, also when viewing Yahoo! Mail in IE11 on Win7x64.
The difference, in my case, is that the certificate is issued by Symantec rather than avast.   However, I have disabled avast's HTTPS scanning (Settings / Active Protection / Webshield ), which likely accounts for the difference (Symantec as issuer vs. Avast).

I have simply clicked NOT to proceed... and have no problems accessing Yahoo mail.

[priestlucas123]

I have run a full Avast scan, as well as a full scan using Malwarebytes Anti-Malware; no problems found

[priestlucas123]

Something I have noticed is that normally Yahoo Mail displays two ads on the right of the screen. If the certificate message is seen once then only one ad is seen, if it is displayed twice (one right after the other) then no ads are displayed.

Anyone have any idea how to contact Yahoo about their ad server being corrupted?

[Eddy]

https://forum.avast.com/index.php?topic=188444.msg1325275#msg1325275

[ky331]

I believe that installing AdBlock Plus for IE will mitigate the issue.
https://adblockplus.org/en/internet-explorer

[priestlucas123]

running AdBlock Plus for IE does make the problem go away, but doesn't solve why it is happening.

I have been working with Yahoo (both customer service and online forums) and have not gotten any useful help or suggestions.

I have currently run ten different malware/pup scanners and nothing found by any.

Does anyone have any suggestions?

[Eddy]

Does it also happen if you use other browsers ?

[priestlucas123]

Also happens in Chrome.

I restored a full backup of my computer from three months ago (certificate problem started about one month ago), and installed Avast 11.2.2262 and did not see any certificate problems for several days. I then updated to 12.2.2276 and the certificate problem occurred within minutes so it seems something changed in Avast either 2272 or 2276 that causes the certificate problem.