xcorps Posted June 16, 2014 Share Posted June 16, 2014 When browsing the various pages of this forum, I get redirected to places such as http://a.rfihub.com/sed?w=468&h=60&co=bB%3Atrue%2CisAI%3Afalse%2CisSkip%3Afalse%2Cbt%3A1402948629841%2Coptimize%3Afalse%2CscoreMicroClicks%3A0%2CexId%3A539f4c15000b37ad0a4507c625005d391%2CuG%3A0%2Curl%3Alax-56.lax-rtb1.rfihub.net%2Csej%3Afalse%2CserverId%3Alax-56%2Cmt%3A1%2CscoreMicroConversions%3A0%2CnewUser%3Afalse%2CuV%3A0%2Cuuid%3A1188105877161329734&ep=U59MFQALN60KRQfGAABdObcvk5J1ozx7pPmJoQ&ri=0e336bd4bcf5951881818a830f22a937&rs=&ai=311381&rt=230685&re=19235&ug=&pv=0&ra=9486310750.4644870769197237&rb=445&ca=&rc=13.0&rd=http%3A%2F%2Fadclick.g.doubleclick.net%2Faclk%253Fsa%253Dl%2526ai%253DCBAVVFUyfU63vLMaPlAK5uoGoAveY_-wEh6vb3H3AjbcBEAEgAFCAx-HEBGDJpquH3KPEEIIBF2NhLXB1Yi01MDAxMzQxNjgzNjMxMzYyoAGz7MfrA8gBCagDAaoEmQFP0DfrCkqzGR55WhkeVg-4eJ14_yDqzeApMM_QD30e5N2EgD8L_OUXeEfMrWL4WpvusDpXGHEqRykHL9529VlHvlLmN5inVeibUxg3UwPgwvkqWaQo4Dmsfo8YMDFlQ6AmiMAtmHyYyleE0n1fHrrRauv0oChL9Ty84P_Q9j60L-CJBOCTMhfa47HQKXDopz7IJA_5F7lcsDGABs2296KHzdLZC6AGIQ%2526num%253D1%2526sig%253DAOD64_3UPEpxu7jeLVxMs50E4kyNA_gc-A%2526client%253Dca-pub-5001341683631362%2526adurl%253D&ua=&ub=&uc=&ud=&ue=&pa=ppre9486310693589&pb=&pc=&pd=&pg=&ct=1402948631075&di=&app=0&pe=http%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fabl%3DCS%26client%3Dca-pub-5001341683631362%26output%3Dhtml%26h%3D60%26slotname%3D8213024102%26adk%3D2495010347%26w%3D468%26lmt%3D1402948629%26flash%3D13.0.0.206%26url%3Dhttp%253A%252F%252Fforum.kerbalspaceprogram.com%252Fthreads%252F83288-Problems-with-SAS-ASAS%253Fp%253D1217018%2523post1217018%26dt%3D1402948629691%26bpp%3D9%26shv%3Dr20140611%26cbv%3Dr20140417%26saldr%3Dsa%26correlator%3D1402948629743%26frm%3D20%26ga_vid%3D448248806.1402948630%26ga_sid%3D1402948630%26ga_hid%3D327400621%26ga_fc%3D0%26u_tz%3D-300%26u_his%3D14%26u_java%3D1%26u_h%3D1059%26u_w%3D1882%26u_ah%3D1012%26u_aw%3D1882%26u_cd%3D24%26u_nplug%3D0%26u_nmime%3D0%26dff%3Dtimes%2520new%2520roman%26dfs%3D13%26adx%3D1359%26ady%3D152%26biw%3D1882%26bih%3D947%26eid%3D317150304%26oid%3D3%26ref%3Dhttp%253A%252F%252Fforum.kerbalspaceprogram.com%252Fforums%252F15-GameplaIs this from the ad server? Can you make it stop? Link to comment Share on other sites More sharing options...
sal_vager Posted June 16, 2014 Share Posted June 16, 2014 Hmm, have you done a virus scan recently? Link to comment Share on other sites More sharing options...
xcorps Posted June 16, 2014 Author Share Posted June 16, 2014 It's scheduled daily. (McAfee). It occasionally gets interrupted by myself or the guy who works for me, but it gets a full scan at least 4-5 times a week.Using other virus scanners, browsers, etc is not an option. I do not and will not have admin rights. I can't even update adobe reader. Link to comment Share on other sites More sharing options...
sal_vager Posted June 16, 2014 Share Posted June 16, 2014 Have you tested an ad blocker to see if it is the ads causing this? Link to comment Share on other sites More sharing options...
xcorps Posted June 16, 2014 Author Share Posted June 16, 2014 I'm sorry, that's impossible on this machine. I cannot install or change any software.On my personal laptop I have a variety of higher level anti malware solutions, so I never see this issue. I do occasionally get warnings from Malwarebytes about blocking potentially malicious sites, but that's normal across the web. What annoys me is the redirect, which mcafee turns into "Cannot load" error page. Link to comment Share on other sites More sharing options...
sal_vager Posted June 16, 2014 Share Posted June 16, 2014 I don't think this is coming from the ad server, you say you can't install stuff, something could have been installed by another person who uses that machine. Link to comment Share on other sites More sharing options...
xcorps Posted June 16, 2014 Author Share Posted June 16, 2014 Not unless IT installed it. Nobody at this work site has admin rights. Every install and update has to be done by IT. Including updates to Adobe, Windows, Printer software, etc.I'll try to keep track of the redirects. Link to comment Share on other sites More sharing options...
The Destroyer Posted June 16, 2014 Share Posted June 16, 2014 Could be a virus, I mean, Macafee isn't the greatest AV. Link to comment Share on other sites More sharing options...
GalaxiesFinestToday Posted June 16, 2014 Share Posted June 16, 2014 Go to your settings and see if you have any apps/extensions installed. Thats how i got rid of ads popping up and opening new tabs. Link to comment Share on other sites More sharing options...
xcorps Posted June 17, 2014 Author Share Posted June 17, 2014 Rifhub is the culprit, not the computer. Link to comment Share on other sites More sharing options...
sjwt Posted June 17, 2014 Share Posted June 17, 2014 Rfihub seems to hijack pages here and there, you might be abel to find a fix.. https://www.google.com/search?btnG=1&pws=0&q=rfihub+hijacking+fix&gws_rd=ssl Link to comment Share on other sites More sharing options...
Starwaster Posted June 17, 2014 Share Posted June 17, 2014 No, rfihub is only one of may places he's being redirected to. There's malware on his computer. Probably 'rich media', but the name changes frequently as a means of disguising the malware from attempts to root it out. I had it on my PC a few months back and there were 5 different incarnations on my PC with similar sounding names. ('rich media player', 'x player', 'y media', etc etc)It's also possible his hosts file has been contaminated.Here's a website that might helphttp://malwaretips.com/blogs/rich-media-view-virus/ Link to comment Share on other sites More sharing options...
Tiberion Posted June 17, 2014 Share Posted June 17, 2014 Yeah you have a browser hijack trojan infection, if you don't have admin rights you'll need IT service it Link to comment Share on other sites More sharing options...
xcorps Posted June 17, 2014 Author Share Posted June 17, 2014 It isn't malware. It's a cockup between google ad services and rifhub.This thead has no more utility, please close. Link to comment Share on other sites More sharing options...
Recommended Posts