This forum thread needs a solution.
Kudos0

btrll.com certificate message

Posted: 05-Apr-2016 | 6:51AM · 43 Replies ·

In the last few days I am getting a popup that says "*.btrll.com  certificate is invalid" do you want to proceed, I click NO but then it just goes into an endless loop.

This is happening on 2 different comports. One desktop and one laptop. Both have Norton Security running and are Windows 7 OS.  Don't know where this came from.  

Some suggestions have been to remove via Control Panel and msconfig. But neither one of them show it listed.

How do I get rid of whatever this is?

Any help will be appreciated

Ron

Labels: Adware, Norton Security, Internet Explorer

Replies

Kudos0

Re: btrll.com certificate message

Posted: 05-Apr-2016 | 5:23PM · Permalink

Hello

Do you own a GoDaddy website or have you gone to one?  I would suggest that you go to one of the free malware removal sites and see if they know about it and if its malicious or not.

Please see this link for an up to date description of these sites plus the addition of a newly listed site formed by one of our successful malware remover users. The new site is listed first in this link.

https://community.norton.com/en/forums/malware-removal-forum-recommendations

Please come back and let us know how you made out.

Thanks.




 

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit 2004 N 360 22.20.5.39 Chrome latest version.
Kudos0

Re: btrll.com certificate message

Posted: 07-Apr-2016 | 2:26PM · Permalink

A certificate error is usually connected to trying to access a specific site. The certificate tells your browser that the site is who you think it is. If the site's certificate has expired, you will see a warning. You have to decide whether or not to take the chance to visit the site anyway, possibly exposing your system to something malicious.

Do you only have this warning when visiting one specific web site?

Kudos0

Re: btrll.com certificate message

Posted: 07-Apr-2016 | 5:33PM · Permalink

Hello

Here is some information from Virus Total about the website domain.

https://www.virustotal.com/en/domain/pix.btrll.com/information/

Thanks.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit 2004 N 360 22.20.5.39 Chrome latest version.
Kudos0

Re: btrll.com certificate message

Posted: 13-May-2016 | 11:06AM · Permalink

I am getting this btrll.com popup constantly, sometimes 46 times in a minute.  I only get it on 1 site, wunderground.com.  They say I am the only one having this problem.

I have tried some of the free and trial antivirus sites and none have identified it.   One forum had a member on another forum who posted an antivirus program that worked but it did not work for me.

My research suggest it is undetectable by antivirus programs.

I have tried your PowerEraser and it will not identify it or correct the problem.

Btrll is a search engine but my research shows they have at least 2 viruses.

Surely Norton has the technical abilities to identify this virus.

Please help, We are at a dead end for solution.

Kudos0

Re: btrll.com certificate message

Posted: 13-May-2016 | 8:01PM · Permalink

Hello JBen04

Please see my advice in my earlier post about going to one of the free malware removal sites. They will work with you on a one to one basis until your computer is clean. Please visit one of them and stay with them until your computer is clean. Don't try to fix this on your own.

Thanks.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit 2004 N 360 22.20.5.39 Chrome latest version.
Kudos0

Re: btrll.com certificate message

Posted: 18-Jun-2016 | 8:16AM · Permalink

I am getting the same popup from Weather Underground.  Any updates on the removal

Kudos0

Re: btrll.com certificate message

Posted: 18-Jun-2016 | 9:36AM · Permalink

As I noted above, this is not a Norton warning. Your browser checks the certificates for sites you visit to see that they are who they say they are. There is nothing Norton can do.

Try sending a screenshot of the error to the administrator of the site you get the message for.

Kudos0

Re: btrll.com certificate message

Posted: 18-Jun-2016 | 12:35PM · Permalink

I am receiving this message also. It is not an Internet Explorer message. It is a Norton Security message.

Kudos0

Re: btrll.com certificate message

Posted: 18-Jun-2016 | 12:52PM · Permalink

An invalid certificate error would be returned by the browser.  Could you post a screenshot of the message?

Kudos0

Re: btrll.com certificate message

Posted: 18-Jun-2016 | 3:28PM · Permalink

Instructions to post screenshots can be found here
https://community.norton.com/forums/how-post-image-forums-0

Kudos0

Re: btrll.com certificate message

Posted: 18-Jun-2016 | 4:22PM · Permalink

My mistake. The alert message does not identify its source. It states "The name on the certificate is invalid or does not match the name of the site".

The Certificate was Issued By: Symantec Class 3 Secure Server CA - G4.

Issued to: *btrll.com.

This Alert Message often pops up while my browser is idle. I am not requesting any web site at the time.

Does this mean that an attempt to reach the btrll.com web site is being made without my consent?? Apparently, this is the case.

Kudos0

Re: btrll.com certificate message

Posted: 18-Jun-2016 | 7:18PM · Permalink

The certificate is issued by Symantec. Not the alert message.

There could be some item on a web page you are visiting that could be requesting access to brtll.com

Kudos0

Re: btrll.com certificate message

Posted: 18-Jun-2016 | 7:55PM · Permalink

NeoTrinity:

This Alert Message often pops up while my browser is idle. I am not requesting any web site at the time.

Does this mean that an attempt to reach the btrll.com web site is being made without my consent?? Apparently, this is the case.

That is precisely what it sounds like.  You may want to visit one of the free malware removal sites suggested here:

https://community.norton.com/en/forums/malware-removal-forum-recommendat...

Kudos0

Re: btrll.com certificate message

Posted: 18-Jun-2016 | 8:14PM · Permalink

Hello

I suggested the free malware removal sites in the first response to this thread. I realize it was to a different user, but with the same topic. Don't know if the O/P went to one of the free removal sites or not. Virus Total is also showing that it has some bad ratings.

Thanks.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit 2004 N 360 22.20.5.39 Chrome latest version.
Kudos0

Re: btrll.com certificate message

Posted: 16-Feb-2017 | 10:57AM · Edited: 16-Feb-2017 | 11:01AM · Permalink

User floplot and others suggested use a "free malware removal site", which is bad advice without mentioning reliable sites. Hackers and viruses love to place links to so-called "free virus removal" that actually infect the victim's computer instead of fixing it.

Use only a well-known malware removal program, such as Malwarebytes, Symantec Power Eraser or even Microsoft Malicious Software Removal Tool.

Always avoid ads/links to "free" anything.

I have a client who gets these "bad certificate" errors from Kaspersky Antivirus.

Kudos0

Re: btrll.com certificate message

Posted: 16-Feb-2017 | 1:22PM · Permalink

Nogero

The sites we link to for the free malware removal are legitimate, reputable sites that malware experts that used to frequent these forums have checked out and used. In fact one of the sites is run by one of the Gurus here on this forum. 

Your advise definitely is valuable if you receive a link from an email or a browser pop up. Those are definitely suspicious.

Kudos0

Re: btrll.com certificate message

Posted: 16-Feb-2017 | 3:59PM · Permalink

My comment was directed at a post that didn't give any links, it just said "use one of the free malware removal tools" or so. They just have to be real careful where they get it.

Kudos0

Re: btrll.com certificate message

Posted: 16-Feb-2017 | 6:08PM · Permalink

My comment was directed at a post that didn't give any links, it just said "use one of the free malware removal tools" or so. They just have to be real careful where they get it.

Your comment mentions floplots's post about the malware removal sites. If you follow this entire thread, the second post here by floplot gives the links to the recommended sites.

Kudos0

Re: btrll.com certificate message

Posted: 16-Feb-2017 | 8:16PM · Permalink

Hello Peter

Thank you

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit 2004 N 360 22.20.5.39 Chrome latest version.
Kudos0

Re: btrll.com certificate message

Posted: 09-Mar-2017 | 4:41AM · Permalink

Hi everybody, I started having this .btrll.com issue today. As long as my Firefox was open, this certificate issue kept appearing. I did as search on my laptop for the .btrll.com and came up with some files. I don,t remember what they were but I do know that they were in an "old Firefox" folder. I deleted every thing in the folder including  the "old Firefox" folder itself. That has solved the issue completely for me.

Best regards,

Noel Cremin

Kudos0

Re: btrll.com certificate message

Posted: 09-Mar-2017 | 4:51AM · Permalink

Hi again everybody, unfortunately, the .btrll.com error has reappeared so my "fix" has not worked. Apologies to all! Noel Cremin

Kudos0

Re: btrll.com certificate message

Posted: 09-Mar-2017 | 5:50AM · Permalink

Can you post a screenshot of the certificate error? 

Instructions to post screenshots can be found here
https://community.norton.com/forums/how-post-image-forums-0

Kudos0

Re: btrll.com certificate message

Posted: 09-Mar-2017 | 8:20AM · Permalink

Hi, Unfortunately (or fortunately!) I can't because I have fixed the problem. As I mentioned in a previous post, the problem seems to be Firefox related. I cleared old Firefox files (kept after update I think) and that seemed to work...but then the error returned. I then went to "add-ons" in Firefox and re-enabled "adblock" . This seems to have fixed the issue.

Regards,

Noel Cremin

Kudos0

Re: btrll.com certificate message

Posted: 19-Mar-2017 | 12:18PM · Permalink

Hello everybody,

I have the same error as Nimerc. I can only provide the error message in german.

The error seem to appear only if I am starting Skype. So maybe there is some relation between this certificate and Skype!

Thanks for any help! :)

Kudos0

Re: btrll.com certificate message

Posted: 19-Mar-2017 | 2:39PM · Permalink

LightningMcK

The message you are seeing is presented by your browser. It is not a Norton issue. 

What is probably happening is a site you are visiting has some ad on the page that tries to access btrll.com, and that site's certificate has some problem.

Try what Nimerc did and run an ad blocker extension/add on for your browser.

Kudos0

Re: btrll.com certificate message

Posted: 19-Mar-2017 | 2:49PM · Edited: 19-Mar-2017 | 2:50PM · Permalink

"The message you are seeing is presented by your browser. It is not a Norton issue. "

That is wrong. It is a Norton message. At least the ones I have seen are Norton-branded messages in Notifications. I suspect Norton added a feature that watches SSL certificates and reports when it sees a bad one.

Kudos0

Re: btrll.com certificate message

Posted: 19-Mar-2017 | 3:32PM · Permalink

Nogero

The image above in LightningMcK's post is not a Norton message. That is a message from their browser.

There are other issues where Norton did present a Certificate error for some Windows 10 programs and features. That is a different issue from what is in this thread which deals with web site certificate issues.

Kudos0

Re: btrll.com certificate message

Posted: 19-Mar-2017 | 4:02PM · Permalink

OK, I can't see the image. It says "image awaiting moderation".

I think I know what's with the btrll issue. As you said, it is ads. They get subdomains from btrll.com, such as mydomain.btrll.com, and they try to use btrll's cert. Maybe someone already said that.

Kudos0

Re: btrll.com certificate message

Posted: 19-Mar-2017 | 7:12PM · Permalink

OK, I can't see the image. It says "image awaiting moderation".

Sorry. I sometimes forget that gurus here can see the images before they have been approved by the mods. A tool to help us help others.

Kudos0

Re: btrll.com certificate message

Posted: 20-Mar-2017 | 12:53AM · Permalink

In my case Peterweb was right. It was not a Norton issue, because I don't run Norton on my PC. I just came along this thread and thought maybe the error message (even if it is not from Norton) may help do identify the problem more easily.
I also did more research and also think it is ad related as stated by nogero.

Kudos0

Re: btrll.com certificate message

Posted: 28-Mar-2017 | 6:30AM · Permalink

I also think this is a skype issue, as I don't have norton and I've been getting this error since 28 Mar 2017 on 2 computers, both of which have skype. doesn't appear if I'm not in skype I don't think.

APM

Kudos0

Re: btrll.com certificate message

Posted: 16-May-2017 | 7:29AM · Permalink

This issue is not related to Norton, nor is it directly related to Skype.

The problem is that certain AOL ads have certificate issues. If you browse a website that have AOL ads, or use skype (which also uses AOL ads), you might experience this certificate error.

If you know which ad is causing problems, you can report it here.

http://feedback.aol.com/product/newaolcom/

Source: https://community.skype.com/t5/Security-Privacy-Trust-and/Security-Alert...

Kudos0

Re: btrll.com certificate message

Posted: 10-Jun-2017 | 6:45AM · Permalink

I have read from many participants that this comes from a Yahoo site... I cannot verify this, but I did get rid of the pop-up by running the Norton quick scan, making sure that in "settings", going to "antivirus", then "scans", you turn ON the "remove tracking cookies" option... the problem is that if you again go on the site it comes from... the pop-up will reappear... that would be a task for Norton to make sure which site(s) this comes from and give our security system an effective block for it.

Kudos0

Re: btrll.com certificate message

Posted: 30-Jul-2017 | 9:43AM · Edited: 30-Jul-2017 | 9:45AM · Permalink

Is there someone who knows what they do at Norton Security. I have the same problem and brtll.com is said to be a web malware. But you even don't know it!!! How could you help your users to get rid of it then? WE NEED YOUR HELP! Do something fast!!

Kudos0

Re: btrll.com certificate message

Posted: 30-Jul-2017 | 10:24AM · Permalink

danny_1952

If you are seeing the same certificate message in a post above, as I noted in my post above, it has nothing to do with Norton. It is a problem with some web site certificate that is being reported by your browser.

brtll.com is a web site, not a malware. That site may have malware on it, and your browser detecting a bad certificate is one defense your computer has invoked.

As Nimerc noted above, activating the Ad Blocker in the browser stopped this message. This would indicate that it is coming from some ad on a site you are visiting.

Kudos0

Re: btrll.com certificate message

Posted: 03-Aug-2017 | 9:29PM · Permalink

I had been getting the btrll (Brightroll ads ) pop up for some time  ( only on yahoo mail   using Windows 7  and 'hoo became slower and slower  ) and always just denied them ( click  red X) but  by mid July ,2017 they became  multiple and continual and I could not use  yahoo ( who did not respond to my requests for help ) ..I use Norton and Malware Bytes and MS security ...none of which found a problem ...I also tried several malware removers ...with no success ...then I found ( on 7-25) a site that recommended using "AdBlock Plus " which I downloaded ( only a few minutes ) ...restarted and ...no more btrll ...I found that the ad block is in the lower right and I have disabled it for all my sites but yahoo...and I was still free of the pop ups ..yesterday I disabled it on 'hoo and ..the popups were back within a minute ..and I had to reenable it and restart my pc to stop the massive "btrll" flood that attacked 'hoo...I do not mind the ads ...and understand that they help pay for the web access ...but have used hoo for years and was unable to use it until I activated ad block plus ...so it does not end the problem ...it blocks it ...hopefully 'hoo ( with new owners ) may find a way to work with Brightroll and fix this ...

Kudos0

Re: btrll.com certificate message

Posted: 01-Sep-2017 | 12:17PM · Edited: 01-Sep-2017 | 12:28PM · Permalink

I have been having the same problem with the btrll.com certificate error and since last year.

For an extended period this year (periodically still occurring), included a similar sort of constant certificate error attack as btrll.com but claiming to be associated with kbntx.ch and hosted by Amazon, registered to Halliburton.

I have a gut feeling, if not strong suspicion, that since very select and few individuals in our country are having this certificate issue (targeted), all the while Amazon (largest cloud provider to the CIA) and Yahoo remain quiet with regards to the matter (possibly in collusion), that the problem is not an innocent accident or issue with Yahoo being purchased or simply a dating issue or problem generated from outside of our nation's boarders by a hostile nation(s) e.g. Israel, China ... or simply an issue associated with a non supported browsers, the certificate error attacking the targeted individual regardless of browser in use (IE, Firefox, Chrome ...), but is in fact a very low level and advance construct (code) that perhaps, is also related to a zero day exploit.

That more likely than not, it is our own federal government and via other covert agencies related to communications that is central to the entire issue, they fully aware of the problem, having created the problem as they fake the stated mission statement to the citizens and to the effect, we exist to try and protect the citizens of this nation to include very bad stuff on the internet. That in fact, the certificate error is most likely a government sanctioned, if not created activity that has the full support of the injustice and very conflicted and criminal US Department of Justice, FISA and other criminal entities. Since this problem is related to major content providers in our nation, suspect that if honest, is exactly the sort of matter that the NSA or like entities located at Tyson Corner and else where would be addressing to help citizens of our country, but then again, the colluding thus criminal Fed (protected and continuing to protect the non Hawai`ian born as claimed RICO Act fraud, Mr. Obama) is a very self serving and insecure entity void of integrity, ethics to include honor, the entity consumed with individuals that have not earned their liberties and freedom and from the top down to include many that are not nor will they ever be loyal to this nation, just takers of liberty and freedom, thus do not nor will they ever, respect the same of others to include efforts to stop attacks on the computers of very specific citizens and along the nature of attempted digital trespassing to include a very possible criminal desire to inflict great harm along a personal level. Again the irony is that it is most likely the activity of the US Federal Government, as it expresses its anger and spite with specific individuals. When bad events happen on our soil (e.g. Boston, Riverside), is another time that I see excessive efforts like brtll being let loose on the web to compromise computer systems even further.

I recommend to all to not ever permit the btrll certificate on your computer.

To close, I suspect there is no solution to the issue and none will be provided in the near future.

Kudos0

Re: btrll.com certificate message

Posted: 02-Sep-2017 | 8:22AM · Edited: 02-Sep-2017 | 8:49AM · Permalink

Have you seen this ?
https://www.bleepingcomputer.com/forums/t/624560/btrllcom-malware/

Kudos0

Re: btrll.com certificate message

Posted: 02-Sep-2017 | 8:34AM · Edited: 02-Sep-2017 | 8:50AM · Permalink

How to post an image in the forums.

https://safeweb.norton.com/report/show?url=btrll.com

https://www.bleepingcomputer.com/forums/t/624560/btrllcom-malware/

btrll.com does not resolve to an IP address. Please make sure your DNS records are set up correctly.

Kudos0

Re: btrll.com certificate message

Posted: 02-Sep-2017 | 10:47AM · Edited: 02-Sep-2017 | 10:53AM · Permalink

FWIW

Kudos0

Re: btrll.com certificate message

Posted: 02-Oct-2017 | 7:59AM · Edited: 02-Oct-2017 | 8:03AM · Permalink

I switched to Microsoft Edge and that appears to have solved my problem.  No more btrll certificate pop-ups.

Ben

Kudos0

Re: btrll.com certificate message

Posted: 02-Oct-2017 | 7:00PM · Permalink

Hello

Edge is not completely protected by all parts of Norton Security.  That may be the reason for no popups.

Thanks.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit 2004 N 360 22.20.5.39 Chrome latest version.
Kudos0

Re: btrll.com certificate message

Posted: 03-Oct-2017 | 6:51PM · Permalink

bjm_:

How to post an image in the forums.

https://safeweb.norton.com/report/show?url=btrll.com

https://www.bleepingcomputer.com/forums/t/624560/btrllcom-malware/

btrll.com does not resolve to an IP address. Please make sure your DNS records are set up correctly.

This advertiser has a number of sub-domains. They also seem to get their SSL certs messed up on a regular basis. Just because the "btrll.com" doesn't resolve to anything it doesn't mean they are dead/gone.

geo-um.btrll.com
cache.btrll.com
yrtas.btrll.com
shim.btrll.com

Not to say I count them as a reputable advertiser considering I know about their sub-domains because they are on my block list. Then again where does one find a reputable advertiser these days...

This thread is closed from further comment. Please visit the forum to start a new thread.