Having certificate problems when browsing on a particular site. Possible phishing problem.

Having certificate problems when browsing on a particular site. Possible phishing problem.

"This Is Probably Not The Site You Are Looking For!"

Im on Windows Xp Home SP3.

I'm trying to deposit money on a pokersite and im having errors on my PC. I can access the site from my wireless laptop and even my iphone, but i prefer to do my banking on my PC.

On my PC, I log into a secure poker site. I dont click on a bookmark but actually type out the link on the address bar (cashier.lockpoker.eu). Within the site, there is a deposit link that you go to if you want to deposit money (duh lol). However, when I click on the link to get there, im getting a certificate error on all three internet browsers i try (firefox, safari, chrome). Again I can access the deposit link on my Laptop and iPhone, but I cant do it on my PC.

Here are the message I received from the three browsers:

From Mozilla
---------------------------------------
This Connection is Untrusted

You have asked Firefox to connect securely to processor6.realtimegaming.com, but we can't confirm that your connection is secure.

Normally, when you try to connect securely, sites will present trusted identification to prove that you are going to the right place. However, this site's identity can't be verified.
What Should I Do?

If you usually connect to this site without problems, this error could mean that someone is trying to impersonate the site, and you shouldn't continue.
Technical Details

processor6.realtimegaming.com uses an invalid security certificate. The certificate is only valid for search.dnsadvantage.com (Error code: ssl_error_bad_cert_domain)
----------------------------------------

From Chrome
----------------------------------------
This webpage is not available
The webpage at https://processor6.realtimegaming.com/cashier/LoginRTG.asp might be temporarily down or it may have moved permanently to a new web address.
Error 501 (net::ERR_INSECURE_RESPONSE): Unknown error.
----------------------------------------

From Chrome (when I copy/pasted https://processor6.realtimegaming.com/cashier/LoginRTG.asp to directly access the site)
----------------------------------------
This is probably not the site you are looking for!
You attempted to reach processor6.realtimegaming.com, but instead you actually reached a server identifying itself as search.dnsadvantage.com. This may be caused by a misconfiguration on the server or by something more serious. An attacker on your network could be trying to get you to visit a fake (and potentially harmful) version of processor6.realtimegaming.com.
You should not proceed, especially if you have never seen this warning before for this site.
Proceed anyway Back to safety
Help me understand
When you connect to a secure website, the server hosting that site presents your browser with something called a "certificate" to verify its identity. This certificate contains identity information, such as the address of the website, which is verified by a third party that your computer trusts. By checking that the address in the certificate matches the address of the website, it is possible to verify that you are securely communicating with the website you intended, and not a third party (such as an attacker on your network).

In this case, the address listed in the certificate does not match the address of the website your browser tried to go to. One possible reason for this is that your communications are being intercepted by an attacker who is presenting a certificate for a different website, which would cause a mismatch. Another possible reason is that the server is set up to return the same certificate for multiple websites, including the one you are attempting to visit, even though that certificate is not valid for all of those websites. Google Chrome can say for sure that you reached search.dnsadvantage.com, but cannot verify that that is the same site as processor6.realtimegaming.com which you intended to reach. If you proceed, Chrome will not check for any further name mismatches.
---------------------------------

From Safari
---------------------------------
Safari can't verify the identity of the website "processor6.realtimegaming.com".

The Certificate for this website is invalid. You might be connecting to a website that is pretending to be "processor6.realtimegaming.com", which could put your confidential information at risk. Would you like to connect to the website anyway?
---------------------------------

Chrome (well all three browsers) basically diagnosed the problem right? Am i being phished or is it something else?

Ive run Avast Antivirus Bootscam, MBAM malware scan, Kaspersky TDSSKiller scan, and while I did get some hits, and removed particular items, the problems persists.

Not really sure how to tackle this. thanks for taking a look. Hope to hear from someone soon.

Hello, let's get a look and see if we can find something.

Please download MiniToolBox, save it to your desktop and run it.

Checkmark the following checkboxes:

• Flush DNS
• Report IE Proxy Settings
• Reset IE Proxy Settings
• Report FF Proxy Settings
• Reset FF Proxy Settings
• List content of Hosts
• List IP configuration
• List Winsock Entries
• List last 10 Event Viewer log
• List Installed Programs
• List Users, Partitions and Memory size.

Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.

Note: When using "Reset FF Proxy Settings" option Firefox should be closed.




Next run MBAM (MalwareBytes):

Please download Malwarebytes Anti-Malware and save it to your desktop.

• Important!! When you save the mbam-setup file, rename it to something random (such as 123abc.exe) before beginning the download.

Malwarebytes may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.

• Make sure you are connected to the Internet and double-click on the renamed file to install the application.
• When the installation begins, follow the prompts and do not make any changes to default settings.
• Malwarebytes will automatically start and you will be asked to update the program before performing a scan.
• If an update is found, the program will automatically update itself. Press the OK button and continue.
• If you cannot update Malwarebytes or use the Internet to download any files to the infected computer, manually update the database by following the instructions in FAQ Section A: 4. Issues.

• Under the Scanner tab, make sure the "Perform Quick Scan" option is selected.
• Click on the Scan button.
• When finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
• Click OK to close the message box, then click the Show Results button to see a list of any malware that was found.
• Make sure that everything is checked and then click Remove Selected.
• When removal is completed, a log report will open in Notepad.
• The log is automatically saved and can be viewed by clicking the Logs tab.
• Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows the database version and your operating system.
• Exit Malwarebytes when done.

Note: If Malwarebytes encounters a file that is difficult to remove, you will be asked to reboot your computer so it can proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot normally will prevent Malwarebytes from removing all the malware.

-- Some types of malware will target Malwarebytes and other security tools to keep them from running properly. If that's the case, go to Start > All Programs > Malwarebytes Anti-Malware folder > Tools > click on Malwarebytes Chameleon and follow the onscreen instructions. The Chameleon folder can be accessed by opening the program folder for Malwarebytes Anti-Malware (normally C:\Program Files\Malwarebytes' Anti-Malware or C:\Program Files (x86)\Malwarebytes' Anti-Malware).

Thanks for the response. Heres the information you wanted.

MiniToolBox by Farbar Version: 18-01-2012
Ran by Ron (administrator) on 24-05-2012 at 09:30:16
Microsoft Windows XP Home Edition Service Pack 3 (X86)
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================


Windows IP Configuration



Successfully flushed the DNS Resolver Cache.


========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================

"network.proxy.type", 0

"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= Hosts content: =================================

127.0.0.1 localhost

========================= IP Configuration: ================================

Intel® PRO/100 VE Network Connection = Home Network (Connected)


# ----------------------------------
# Interface IP Configuration
# ----------------------------------
pushd interface ip


# Interface IP Configuration for "Home Network"

set address name="Home Network" source=static addr=192.168.1.121 mask=255.255.255.0
set address name="Home Network" gateway=192.168.1.1 gwmetric=0
set dns name="Home Network" source=static addr=156.154.70.22 register=PRIMARY
add dns name="Home Network" addr=156.154.71.22 index=2
set wins name="Home Network" source=static addr=none


popd
# End of interface IP configuration




Windows IP Configuration



Host Name . . . . . . . . . . . . : LivingRoom

Primary Dns Suffix . . . . . . . :

Node Type . . . . . . . . . . . . : Hybrid

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No



Ethernet adapter Home Network:



Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : Intel® PRO/100 VE Network Connection

Physical Address. . . . . . . . . : 00-16-76-5B-DF-74

Dhcp Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 192.168.1.121

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 192.168.1.1

DNS Servers . . . . . . . . . . . : 156.154.70.22

156.154.71.22



Tunnel adapter Teredo Tunneling Pseudo-Interface:



Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface

Physical Address. . . . . . . . . : FF-FF-FF-FF-FF-FF-FF-FF

Dhcp Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : fe80::ffff:ffff:fffd%4

Default Gateway . . . . . . . . . :

NetBIOS over Tcpip. . . . . . . . : Disabled



Tunnel adapter Automatic Tunneling Pseudo-Interface:



Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : Automatic Tunneling Pseudo-Interface

Physical Address. . . . . . . . . : C0-A8-01-79

Dhcp Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : fe80::5efe:192.168.1.121%2

Default Gateway . . . . . . . . . :

DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1

fec0:0:0:ffff::2%1

fec0:0:0:ffff::3%1

NetBIOS over Tcpip. . . . . . . . : Disabled

DNS request timed out.
timeout was 2 seconds.
Server: UnKnown
Address: 156.154.70.22

Name: google.com
Addresses: 74.125.225.7, 74.125.225.6, 74.125.225.3, 74.125.225.9
74.125.225.0, 74.125.225.14, 74.125.225.1, 74.125.225.8, 74.125.225.4
74.125.225.5, 74.125.225.2



Pinging google.com [74.125.225.7] with 32 bytes of data:



Reply from 74.125.225.7: bytes=32 time=802ms TTL=50

Reply from 74.125.225.7: bytes=32 time=65ms TTL=50



Ping statistics for 74.125.225.7:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 65ms, Maximum = 802ms, Average = 433ms

Server: UnKnown
Address: 156.154.70.22

Name: yahoo.com
Addresses: 98.139.183.24, 209.191.122.70, 72.30.38.140



Pinging yahoo.com [209.191.122.70] with 32 bytes of data:



Reply from 209.191.122.70: bytes=32 time=757ms TTL=53

Reply from 209.191.122.70: bytes=32 time=52ms TTL=53



Ping statistics for 209.191.122.70:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 52ms, Maximum = 757ms, Average = 404ms

Server: UnKnown
Address: 156.154.70.22

Name: bleepingcomputer.com
Address: 208.43.87.2



Pinging bleepingcomputer.com [208.43.87.2] with 32 bytes of data:



Reply from 208.43.87.2: Destination host unreachable.

Reply from 208.43.87.2: Destination host unreachable.



Ping statistics for 208.43.87.2:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 0ms, Average = 0ms



Pinging 127.0.0.1 with 32 bytes of data:



Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128



Ping statistics for 127.0.0.1:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 0ms, Average = 0ms

===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x10003 ...00 16 76 5b df 74 ...... Intel® PRO/100 VE Network Connection
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.121 20
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.168.1.0 255.255.255.0 192.168.1.121 192.168.1.121 20
192.168.1.121 255.255.255.255 127.0.0.1 127.0.0.1 20
192.168.1.255 255.255.255.255 192.168.1.121 192.168.1.121 20
224.0.0.0 240.0.0.0 192.168.1.121 192.168.1.121 20
255.255.255.255 255.255.255.255 192.168.1.121 192.168.1.121 1
Default Gateway: 192.168.1.1
===========================================================================
Persistent Routes:
None
========================= Winsock entries =====================================

Catalog5 01 mswsock.dll [File Not found] ()
Catalog5 02 C:\Windows\System32\winrnr.dll [16896] (Microsoft Corporation)
Catalog5 03 mswsock.dll [File Not found] ()
Catalog5 04 C:\Windows\System32\nwprovau.dll [142336] (Microsoft Corporation)
Catalog5 05 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Catalog9 01 mswsock.dll [File Not found] ()
Catalog9 02 mswsock.dll [File Not found] ()
Catalog9 03 mswsock.dll [File Not found] ()
Catalog9 04 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 05 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 06 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 07 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 08 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 09 mswsock.dll [File Not found] ()
Catalog9 10 mswsock.dll [File Not found] ()
Catalog9 11 mswsock.dll [File Not found] ()
Catalog9 12 mswsock.dll [File Not found] ()
Catalog9 13 mswsock.dll [File Not found] ()
Catalog9 14 mswsock.dll [File Not found] ()
Catalog9 15 mswsock.dll [File Not found] ()
Catalog9 16 mswsock.dll [File Not found] ()
Catalog9 17 mswsock.dll [File Not found] ()
Catalog9 18 mswsock.dll [File Not found] ()
Catalog9 19 mswsock.dll [File Not found] ()
Catalog9 20 mswsock.dll [File Not found] ()
Catalog9 21 mswsock.dll [File Not found] ()
Catalog9 22 mswsock.dll [File Not found] ()
Catalog9 23 mswsock.dll [File Not found] ()
Catalog9 24 mswsock.dll [File Not found] ()
Catalog9 25 mswsock.dll [File Not found] ()
Catalog9 26 mswsock.dll [File Not found] ()
Catalog9 27 mswsock.dll [File Not found] ()
Catalog9 28 mswsock.dll [File Not found] ()
Catalog9 29 mswsock.dll [File Not found] ()
Catalog9 30 mswsock.dll [File Not found] ()
Catalog9 31 mswsock.dll [File Not found] ()
Catalog9 32 mswsock.dll [File Not found] ()
Catalog9 33 mswsock.dll [File Not found] ()
Catalog9 34 mswsock.dll [File Not found] ()
Catalog9 35 mswsock.dll [File Not found] ()
Catalog9 36 mswsock.dll [File Not found] ()
Catalog9 37 mswsock.dll [File Not found] ()

========================= Event log errors: ===============================

Application errors:
==================
Error: (05/23/2012 04:59:23 PM) (Source: nview_info) (User: )
Description: NVIEW : KMPlayer: WAIT_TIMEOUT, while waiting for a read to clear - resetting read event

Error: (05/22/2012 10:57:18 AM) (Source: nview_info) (User: )
Description: NVIEW : EditPadLite: WAIT_TIMEOUT, while waiting for a read to clear - resetting read event

Error: (05/22/2012 06:08:41 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 28381297

Error: (05/22/2012 06:08:41 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 28381297

Error: (05/22/2012 06:08:41 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/22/2012 06:08:39 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 28379141

Error: (05/22/2012 06:08:39 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 28379141

Error: (05/22/2012 06:08:39 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/22/2012 06:08:37 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 28376937

Error: (05/22/2012 06:08:37 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 28376937


System errors:
=============
Error: (05/23/2012 09:06:44 PM) (Source: DCOM) (User: Ron)
Description: DCOM got error "%%1058" attempting to start the service iPod Service with arguments ""
in order to run the server:
{063D34A4-BF84-4B8D-B699-E8CA06504DDE}

Error: (05/23/2012 09:06:37 PM) (Source: DCOM) (User: Ron)
Description: DCOM got error "%%1058" attempting to start the service iPod Service with arguments ""
in order to run the server:
{063D34A4-BF84-4B8D-B699-E8CA06504DDE}

Error: (05/20/2012 11:42:50 PM) (Source: Service Control Manager) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
IntelIde

Error: (05/20/2012 03:16:01 PM) (Source: Service Control Manager) (User: )
Description: The following boot-start or system-start driver(s) failed to load:
IntelIde

Error: (05/20/2012 03:14:55 PM) (Source: 0) (User: )
Description: 0xC0000001HarddiskVolume2

Error: (05/20/2012 09:12:28 AM) (Source: Service Control Manager) (User: )
Description: The Process Monitor service failed to start due to the following error:
%%5

Error: (05/19/2012 08:14:25 AM) (Source: Service Control Manager) (User: )
Description: The Process Monitor service failed to start due to the following error:
%%5

Error: (05/17/2012 08:06:12 PM) (Source: Service Control Manager) (User: )
Description: The Process Monitor service failed to start due to the following error:
%%5

Error: (05/17/2012 02:58:21 PM) (Source: Service Control Manager) (User: )
Description: The Process Monitor service failed to start due to the following error:
%%5

Error: (05/17/2012 08:08:29 AM) (Source: Service Control Manager) (User: )
Description: The Process Monitor service failed to start due to the following error:
%%5


Microsoft Office Sessions:
=========================
Error: (05/23/2012 04:59:23 PM) (Source: nview_info)(User: )
Description: NVIEW : KMPlayer: WAIT_TIMEOUT, while waiting for a read to clear - resetting read event

Error: (05/22/2012 10:57:18 AM) (Source: nview_info)(User: )
Description: NVIEW : EditPadLite: WAIT_TIMEOUT, while waiting for a read to clear - resetting read event

Error: (05/22/2012 06:08:41 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 28381297

Error: (05/22/2012 06:08:41 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 28381297

Error: (05/22/2012 06:08:41 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/22/2012 06:08:39 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 28379141

Error: (05/22/2012 06:08:39 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 28379141

Error: (05/22/2012 06:08:39 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (05/22/2012 06:08:37 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 28376937

Error: (05/22/2012 06:08:37 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 28376937


=========================== Installed Programs ============================

µTorrent (Version: 1.6)
7-Zip 4.65
A.F.5 Rename your files 1.1 (Version: 1.1.0.0)
AAC Decoder (Version: 7.1.0)
Absolute Poker
AC-3 ACM Codec
Activision® (Version: 1.00.0000)
Adobe AIR (Version: 1.5.2.8870)
Adobe Anchor Service CS4 (Version: 2.0)
Adobe Bridge CS4 (Version: 3)
Adobe CMaps CS4 (Version: 2.0)
Adobe Color - Photoshop Specific CS4 (Version: 2.0)
Adobe Color EU Extra Settings CS4 (Version: 2.0)
Adobe Color JA Extra Settings CS4 (Version: 2.0)
Adobe Color NA Recommended Settings CS4 (Version: 2.0)
Adobe Color Video Profiles CS CS4 (Version: 2.0)
Adobe CSI CS4 (Version: 1)
Adobe Default Language CS4 (Version: 2.0)
Adobe Digital Editions
Adobe Download Manager (Version: 1.6.2.63)
Adobe ExtendScript Toolkit CS4 (Version: 3.0.0)
Adobe Extension Manager CS4 (Version: 2.0)
Adobe Flash Player 10 ActiveX (Version: 10.1.53.64)
Adobe Flash Player 11 Plugin (Version: 11.2.202.235)
Adobe Fonts All (Version: 2.0)
Adobe Illustrator CS4 (Version: 14.0)
Adobe Linguistics CS4 (Version: 4.0.0)
Adobe Output Module (Version: 2.0)
Adobe PDF Library Files CS4 (Version: 9.0)
Adobe Photoshop CS4 (Version: 11.0)
Adobe Photoshop CS4 Support (Version: 11.0)
Adobe Search for Help (Version: 1.0)
Adobe Service Manager Extension (Version: 1.0)
Adobe Setup (Version: 2.0)
Adobe Shockwave Player 11.5 (Version: 11.5.9.615)
Adobe SVG Viewer 3.0 (Version: 3.0)
Adobe Type Support CS4 (Version: 9.0)
Adobe Update Manager CS4 (Version: 6.0.0)
Adobe WinSoft Linguistics Plugin (Version: 1.1)
Adobe XMP Panels CS4 (Version: 2.0)
Adobe® Photoshop® Album Starter Edition 3.0 (Version: 3.00.000)
AdobeColorCommonSetCMYK (Version: 2.0)
AdobeColorCommonSetRGB (Version: 2.0)
AIM 7
Air Strike 3D
All Video Splitter 4.2.1
Allok Video Joiner 3.2.0807
AnyDVD
AOL Uninstaller (Choose which Products to Remove)
Apple Application Support (Version: 2.1.6)
Apple Mobile Device Support (Version: 4.0.0.97)
Apple Software Update (Version: 2.1.3.127)
Applian FLV Player (Version: 2.0.24)
AsfJoin 0.3.2a Beta
AutocompletePro
AutoHotkey 1.0.48.05 (Version: 1.0.48.05)
AutoUpdate (Version: 1.1)
avast! Free Antivirus (Version: 7.0.1426.0)
Avi2Dvd 0.4.5 beta (Version: 0.4.5 beta)
Avidemux 2.4 (Version: 2.4.4)
AviSynth 2.5
Bonjour (Version: 3.0.0.10)
Bowling Evolution 1.07
BUFFALO Secure Lock Ware
BufferChm (Version: 53.0.13.000)
Canon Camera Access Library (Version: 8.1.1.17)
Canon Camera Support Core Library (Version: 7.3.1.6)
Canon Camera Window DC_DV 5 for ZoomBrowser EX (Version: 5.4.5.17)
Canon Camera Window DC_DV 6 for ZoomBrowser EX (Version: 6.2.0.8)
Canon Camera Window MC 6 for ZoomBrowser EX (Version: 6.1.0.7)
Canon G.726 WMP-Decoder (Version: 1.0.1.3)
Canon MovieEdit Task for ZoomBrowser EX (Version: 2.2.0.13)
Canon RAW Image Task for ZoomBrowser EX (Version: 2.3.0.11)
Canon RemoteCapture Task for ZoomBrowser EX (Version: 1.5.0.5)
Canon Utilities EOS Utility (Version: 1.0.3.17)
Canon Utilities PhotoStitch (Version: 3.1.17.41)
Canon Utilities ZoomBrowser EX (Version: 5.6.0.27)
CCleaner (Version: 3.18)
Chicken Chase (Version: 1.0.1)
CloneDVD 3.6
Cobian Backup 10
Combined Community Codec Pack 2010-10-10 (Version: 2010.10.10.0)
COMODO Internet Security (Version: 5.5.64714.1383)
Connect (Version: 1.0.0.1)
ConvertXtoDVD 3.6.4.158 (Version: 3.6.4.158)
ConvertXtoDVD 4.0.10.324 (Version: 4.0.10.324)
Cooking Dash 3 - Thrills and Spills - Collectors Edition (Version: 1.0.1.145)
CoreAVC Professional Edition (remove only)
Creative MediaSource
Defraggler (Version: 2.08)
Dell CinePlayer (Version: 3.0)
Dell Digital Jukebox Driver
Dell Driver Reset Tool (Version: 1.02.0000)
Dell Support 3.1 (Version: 5.1.760)
Dell System Restore (Version: 2.00.0000)
DesktopX
Destinations (Version: 53.0.13.000)
DeVeDe (Version: 3.12.4)
DeviceFunctionQFolder (Version: 1.00.0000)
DeviceManagementQFolder (Version: 1.00.0000)
Digital Content Portal (Version: 1.00.0000)
DiskAid 5.03 (Version: 5.03)
Disney Pirates of the Caribbean Online (Version: )
DivX Codec (Version: 6.8.5)
DivX Converter (Version: 7.1.0)
DivX Player (Version: 7.2.0)
DivX Plus DirectShow Filters
DivX Version Checker (Version: 7.1.0.2)
DivX Web Player (Version: 1.5.0)
Dow.Community Map Pack 1-4
Download Updater (AOL LLC)
DVD-lab PRO 2.51
DVD Shrink 3.2
DVDInfoPro
Easy Video Splitter 1.28
EasyCleaner (Version: 2.0.6.380)
EasyJob Resume Builder 4.67.2318
eMule
ENIGMO
Eraser
Eraser (Version: 5.84)
eSupportQFolder (Version: 1.00.0000)
EVEREST Home Edition v2.20 (Version: 2.20)
Fast AVI MPEG Joiner 1.1.2
FileZilla Client 3.3.4.1 (Version: 3.3.4.1)
Fishers Family Farm (Version: 1.0)
Folder Lock
Foxit Creator (Version: 3,0,2,0506)
Foxit Reader 5.1 (Version: 5.1.4.104)
Free Download Manager 3.0
FreeCommander 2008.06
GdiplusUpgrade (Version: 1.00.01)
Gizmo Central
Google Chrome (Version: 18.0.1025.162)
Google Talk Plugin (Version: 2.0.7.0)
Google Toolbar for Internet Explorer
Google Toolbar for Internet Explorer (Version: 4.0.0.002)
Google Update Helper (Version: 1.2.183.29)
H.264 Decoder (Version: 1.1.0)
Haali Media Splitter
HandBrake 0.9.5 (Version: 0.9.5)
HiDownloadPlatinum
HP Deskjet 3900 series (Version: 5.0)
HP Imaging Device Functions 5.0 (Version: 5.0)
HP Photosmart Essential (Version: 1.9.1.3)
HP Solution Center & Imaging Support Tools 5.0 (Version: 5.0)
HP Update (Version: 5.003.001.001)
HPDeskjet3900Series (Version: 1.00.0000)
HPProductAssistant (Version: 53.0.13.000)
Huffyuv AVI lossless video codec (Remove Only)
Hyperdesk - DarkMatter Gamma Ray (Version: 1.00.0001)
Hyperdesk - DarkMatter Solar Flare (Version: 1.00.0001)
Hyperdesk - DarkMatter Subspace (Version: 1.00.0002)
Insaniquarium Deluxe 1.1
Intel A/V Codecs V2.0
Intel® Extreme Graphics 2 Driver (Version: 6.14.10.4299)
Intel® PRO Network Adapters and Drivers
Intel® PROSet for Wired Connections (Version: 8.00.5000)
iTunes (Version: 10.5.1.42)
iTunes Library Updater (Version: 1.2.2)
J2SE Runtime Environment 5.0 Update 6 (Version: 1.5.0.60)
Java Auto Updater (Version: 2.0.2.4)
Java™ 6 Update 22 (Version: 6.0.220)
JGoodies JDiskReport 1.3.0 (Version: 1.3.0 (2007-03-13 12:02:29))
Just Great Software EditPad Lite 6.4.1 (Version: 6.4.1)
Kaplan NCLEX-RN Strategy Practice Test
Kaplan Question Trainer
kuler (Version: 2.0)
Learn2 Player (Uninstall Only)
List Maker
Logitech QuickCam (Version: 11.50.1169)
Logitech QuickCam Driver Package
Macromedia Flash Player (Version: 7.0.19.0)
Malwarebytes Anti-Malware version 1.61.0.1400 (Version: 1.61.0.1400)
MCU (Version: 1.00.0000)
MediaInfo 0.7.52 (Version: 0.7.52)
Mega Manager (Version: 3.4.03)
Mega Manager (Version: 3.5.1.0)
Memeo Instant Backup (Version: 4.60.0.7923)
MetaFrame Presentation Server Web Client for Win32
Microsoft .NET Framework 1.1 (Version: 1.1.4322)
Microsoft .NET Framework 1.1 Security Update (KB2656353)
Microsoft .NET Framework 1.1 Security Update (KB2656370)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 2.0 Service Pack 2 (Version: 2.2.30729)
Microsoft .NET Framework 3.0 Service Pack 2 (Version: 3.2.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft Compression Client Pack 1.0 for Windows XP (Version: 1)
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
Microsoft National Language Support Downlevel APIs
Microsoft Office FrontPage 2003 (Version: 11.0.8173.0)
Microsoft Office Professional Edition 2003 (Version: 11.0.8173.0)
Microsoft Plus! Digital Media Edition Installer (Version: 1.1.0.3514)
Microsoft Plus! Photo Story 2 LE (Version: 1.1.0.3463)
Microsoft Silverlight (Version: 5.1.10411.0)
Microsoft SQL Server Native Client (Version: 9.00.2047.00)
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Windows Media Video 9 VCM
Microsoft Works 6-9 Converter (Version: 9.7.0621)
Microsoft XNA Framework Redistributable 3.1 (Version: 3.1.10527.0)
MiPony 1.0.1 (Version: 1.0.1)
MKV Splitter (Version: 1.0.1)
Mount&Blade
Move Media Player
Movica (Version: 1.6.6)
Mozilla Firefox 12.0 (x86 en-US) (Version: 12.0)
Mozilla Maintenance Service (Version: 12.0)
Mp3 Merger V1.0
Mp3tag v2.49 (Version: v2.49)
MSXML 4.0 SP2 (KB925672) (Version: 4.20.9839.0)
MSXML 4.0 SP2 (KB927978) (Version: 4.20.9841.0)
MSXML 4.0 SP2 (KB936181) (Version: 4.20.9848.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MSXML4 Parser (Version: 1.0.0)
Nero 8 (Version: 8.0.182)
Nero 8 Micro 8.3.2.1 (Version: 8.3.2.1)
nHancer (Version: 2.5.0900)
Nokia Connectivity Cable Driver (Version: 7.1.16.0)
Nokia Software Updater (Version: 01.06.013.38541)
NOMAD MuVo TX
Nuclear Coffee - VideoGet 2.0.2.26
NVIDIA Drivers
Orca (Version: 3.1.3790.0000)
OverDrive Media Console (Version: 3.2.5)
PC Inspector File Recovery (Version: 4.0)
PDF Password Remover v3.0
PDF Settings CS4 (Version: 9.0)
PeaZip 2.8
PeerGuardian 2.0 (Version: 2.0.6.5)
PFPortChecker 1.0.39 (Version: 1.0.39)
Photoshop Camera Raw (Version: 5.0)
Picasa 3 (Version: 3.8)
ProTrack 2008 (Version: 8.00.1000)
Qualxserve Service Agreement (Version: 1.11.0000)
Quick PDF Tools 2.1.6.1 (Version: 2.1.6.1)
QuickBooks Pro Edition 2003
QuickPar 0.9 (Version: 0.9)
QuickTime (Version: 7.68.75.0)
Revo Uninstaller Pro 2.5.3 (Version: 2.5.3)
Safari (Version: 5.34.57.2)
Saunders QA Review (Version: 1.0)
Seagate Dashboard (Version: 1.1.0.1421)
Search Assist (Version: 1.00.0000)
Secrecy File & Folder Hider 2.1.0.0
SereneScreen Marine Aquarium 2.6 (Version: 2.6)
SereneScreen Marine Aquarium 3 (Version: 3.0)
SmartFTP Client 2.0 (Version: 2.0.997)
SmartFTP Client 2.0 Setup Files (remove only) (Version: "2.0")
SolutionCenter (Version: 50.0.152.000)
SolveigMM Video Splitter (Version: 2.5.1110.27)
Sonic Activation Module (Version: 1.0)
Sonic DLA (Version: 3.60)
Sonic RecordNow DX (Version: 4.60)
Sonic Simple Backup (Version: 4.9)
Sonic Update Manager (Version: 2.80)
Sothink FLV Player (Version: 2.1)
Speccy (Version: 1.08)
Sportsbook.com Poker
Spybot - Search & Destroy (Version: 1.6.2)
Spyware Terminator (Version: 2.5.6.316)
Star Defender 4
Starcraft
Status (Version: 53.0.13.000)
Subtitle Workshop 2.51
Suite Shared Configuration CS4 (Version: 1.0)
SUPERAntiSpyware Professional (Version: 4.25.0.1012)
SyncBack
System Requirements Lab
System Requirements Lab CYRI (Version: 4.3.1.0)
TableNinja (Version: 1.2.44)
TeraCopy 2.27
The FilmMachine 1.6.0.14 Beta
The KMPlayer (remove only)
TMPGEnc Authoring Works 4 (Version: 4.0.9.37)
TrayApp (Version: 53.0.13.000)
TrueCrypt (Version: 6.3a)
Tucan Manager 0.3.9
Turbo Lister 2 (Version: 2.0.0)
Tweak UI
Ultra Video Splitter 4.1.0
Undelete Plus 2.94
Unix Utilities for Yahoo! Widgets
Unlocker 1.9.0 (Version: 1.9.0)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Windows Internet Explorer 8 (KB976662) (Version: 1)
Update for Windows Internet Explorer 8 (KB976749) (Version: 1)
Update for Windows Internet Explorer 8 (KB980182) (Version: 1)
URL Assistant
VC80CRTRedist - 8.0.50727.762 (Version: 1.0.0)
Verizon Online Help & Support (Version: 1.2.1.44)
Viewpoint Media Player
VLC media player 1.0.1 (Version: 1.0.1)
Watermark Studio 2.0
WebCyberCoach 3.2 Dell
WebFldrs XP (Version: 9.50.7523)
WebReg (Version: 53.0.13.000)
Win AVI HelixSDK
Winamp (Version: 5.581 )
WinAVIVideoConverter
Window Washer
Windows Genuine Advantage Notifications (KB905474) (Version: 1.7.0018.5)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Genuine Advantage Validation Tool (KB892130) (Version: 1.7.0069.2)
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 7 (Version: 20061017.133151)
Windows Internet Explorer 8 (Version: 20090308.140743)
Windows Media Encoder 9 Series
Windows Media Encoder 9 Series (Version: 9.00.2980)
Windows Media Format 11 runtime
Windows Media Player 10 (Version: 9.00.3636)
Windows Media Player 11
Windows Media Player Firefox Plugin (Version: 1.0.0.8)
Windows XP Service Pack 3 (Version: 20080414.031525)
WinFF 1.2
WinPcap 4.1.1 (Version: 4.1.0.1753)
WinRAR archiver
XMedia Recode 2.2.1.6 (Version: 2.2.1.6)
xp-AntiSpy 3.96-6
XviD4PSP 5.0 (Version: 5.037)
Yahoo! Install Manager
Yahoo! Messenger
Yahoo! Widgets (Version: 4.5.2.0)

========================= Memory info: ===================================

Percentage of memory in use: 46%
Total physical RAM: 1277.98 MB
Available physical RAM: 688.91 MB
Total Pagefile: 3046.73 MB
Available Pagefile: 2518.46 MB
Total Virtual: 2047.88 MB
Available Virtual: 1970.13 MB

========================= Partitions: =====================================

1 Drive c: () (Fixed) (Total:108.59 GB) (Free:2.57 GB) NTFS
2 Drive d: (Backup) (Fixed) (Total:37.13 GB) (Free:10.43 GB) NTFS

========================= Users: ========================================

User accounts for \\LIVINGROOM

Administrator Guest HelpAssistant
postgres Ron SUPPORT_388945a0


**** End of log ****


Malwarebytes Anti-Malware (Trial) 1.61.0.1400
www.malwarebytes.org

Database version: v2012.05.24.04

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Ron :: LIVINGROOM [administrator]

Protection: Disabled

5/24/2012 9:08:22 AM
mbam-log-2012-05-24 (09-08-22).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 231463
Time elapsed: 17 minute(s), 36 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

Go to Start ... Run and type in cmd
A dos Window will appear.
Type in the dos window: netsh winsock reset
Click on the enter key.

Reboot your system to complete the process.

See if browsing is normal.

im still getting the same certificate errors. when i try to go to https://processor6.realtimegaming.com/cashier/LoginRTG.asp directly. the certificate is still search.dnsadvantage.com

what happens when you click on that link? (https://processor6.realtimegaming.com/cashier/LoginRTG.asp) do you get errors? are the certificates right?

I get the same massages LOL

Can you go here?

http://www.realtimegaming.com/

when i click on that link you gave.... it never connects just stuck on connecting. i changed the address to https and i got the same certificate error as https://processor6.realtimegaming.com/cashier/LoginRTG.asp

what happens when you click on https://www.realtimegaming.com/

i just tried connecting to http://www.realtimegaming.com/ (not https) on my laptop and i was able to access the website! Why cant i access it through my pc? im starting to get worried.

i also ran a scan on SUPERAntiSpyware and no hits. still the same problem.

This is puzzling
Are you using a router?

What is your firewall


Can you temporarily turn off the firewall and see if you can connect to secure sites. After you have checked, please turn it back on.

You read how to do so here.

Let me know what happens.

i cant seem to connect to that page youve given me. im getting redirected to http://ww2.thepcyoubuy.com/XPFirewall.htm and http://ww1.thepcyoubuy.com/XPFirewall.htm

i typed it out myself on the address bar and im still gettin redirected.

the page doesnt contain any instructions.

My PC is wired to a router. my laptop is wireless to the same router.

my firewall is COMODO firewall

i just had an idea that maybe since you can access it and i cant, maybe they blocked my IP address for some reason. i went to proxify.com and typed in www.realtimegaming.com/ and the page loaded. i have no clue why im being blocked though. shouldnt my laptop also be blocked since we are sharing the same IP address? yet i can still access www.realtimegaming.com (and the deposit site... my main destination) from my laptop.

It would seem so.. I would say if you want to ask more about how that works to ask in Web Beowsing. Omly as someone there may know more than i about that.

Are you sure the (s) sites are correct as I can connect to this
http://www.realtimegaming.com/

On second thought you should post a DDS log. This will make sure you are clean(as there is $$ invoved) and also not hacked.
Start a new topic about wanting to know if anuyone is on the machiine and tp verify it's clean..
You do have a redirect and thats not good.

We need a deeper look. Please go here....Preparation Guide ,do steps 6-9.

Create a DDS log and post it in the new topic explained in step 9 which is here Virus, Trojan, Spyware, and Malware Removal Logs and not in this topic,thanks.
If GMER won't run (it may not on a 64 bit system) skip it and move on.

Let me know if that went well.

i cant access http://www.realtimegaming.com/ with my PC but can access it on my laptop and even my iPhone.

thanks for your help. i will post on the the other section. is it possible to go ahead of the line or do i have to wait for the whole 5 days again?

*****BREAKTHROUGH****

Late last night, i dont know why, but i checked to see if there were any updates on my Comodo Firewall. and sure enough there was. so i updated it and it updated itself super quick (like it was downloaded and ready to install a single 1KB file or something cause it was quick) and it asked me to restart. so I restarted. I felt that the update was so quick that i went back and clicked update again. and there was yet another update. this time it took a little longer. and i restarted it again.

it was late so i set a virus scan and went to bed.

when i got up this morning, i saw that i had no viruses (as expected) and went to check my posts. i decided to click on http://www.realtimegaming.com/ and i am now able to access it. I went on cashier.lockpoker.eu and clicked on the deposit link and im able to access it now. i went to my poker program logged on and clicked on the deposit link and im able to access it now.

my firewall was COMODO Internet Security (Version: 5.5.64714.1383) and now its COMODO Internet Security (Version: 5.10.228257.2253)

Does this mean i was being phished by my firewall all this time? should i be worried? ive been online banking for quite sometime?

I think it was just the firewall in a glitch..Lets review the log and be sure.