MalwareBytes continues to block p.rfihub.com and a.rfihub.com?

[Slick1237]

 

And what can I do to remove them? When I run a general Malware test it says that there are zero threats, but a pop-up notice from MalwareBytes frequently appears saying that a threat was blocked from one of these two sites.

[EWG]

I also have this problem. I'm getting these popups on both IE & Chrome.  MalwareBytes blocks them but if I run a scan; no threats. It seems to me that something is running in the background hidden on my computer that is causing these popups and is likely trying to hijack my browsers. From what I read thus far rfihub.com is some kind of Adware, a nuisance for sure but has the potential to unleash some really horrible stuff on you computer like ransomware. 

 

 

[ImMRB]

I also have this, same thing i scan and it finds nothing

[mogly]

nevermind, still got it here.

Edited January 12, 2017 by mogly

[LindaC]

I am also seeing this in Chrome. Scans show nothing.Also have checked processes in task manager - nothing. Have not installed any free software so not sure what source of a.rfihub.com is.

 

[mogly]

Been about 15 mins now and believe the culprit to be a simple cookie. Ran CCleaner before I shut down for the night as I usually do and an unusually large amount of cookies were fixed this time, and haven't had a RTP alert for a little bit now.

Edited January 12, 2017 by mogly

[MysteryFCM]

Can you post your protection logs please.

[mogly]

Malwarebytes Anti-Malware
www.malwarebytes.org

Update, 1/12/2017 1:32 AM, SYSTEM, , Scheduler, Malware Database, 2017.1.12.2, 2017.1.12.3, 
Protection, 1/12/2017 1:32 AM, SYSTEM, -PC, Protection, Refresh, Starting, 
Protection, 1/12/2017 1:32 AM, SYSTEM, -PC, Protection, Malicious Website Protection, Stopping, 
Protection, 1/12/2017 1:32 AM, SYSTEM, -PC, Protection, Malicious Website Protection, Stopped, 
Protection, 1/12/2017 1:32 AM, SYSTEM, -PC, Protection, Refresh, Success, 
Protection, 1/12/2017 1:32 AM, SYSTEM, -PC, Protection, Malicious Website Protection, Starting, 
Protection, 1/12/2017 1:32 AM, SYSTEM, -PC, Protection, Malicious Website Protection, Started, 
Scan, 1/12/2017 2:24 AM, SYSTEM, -PC, Context, Start:1/12/2017 2:20 AM, Duration:4 min 33 sec, Threat Scan, Completed, 0 Malware Detections, 0 Non-Malware Detections, 
Update, 1/12/2017 2:34 AM, SYSTEM, -PC, Scheduler, Malware Database, 2017.1.12.3, 2017.1.12.4, 
Protection, 1/12/2017 2:34 AM, SYSTEM, -PC, Protection, Refresh, Starting, 
Protection, 1/12/2017 2:34 AM, SYSTEM, -PC, Protection, Malicious Website Protection, Stopping, 
Protection, 1/12/2017 2:34 AM, SYSTEM, -PC, Protection, Malicious Website Protection, Stopped, 
Protection, 1/12/2017 2:34 AM, SYSTEM, -PC, Protection, Refresh, Success, 
Protection, 1/12/2017 2:34 AM, SYSTEM, -PC, Protection, Malicious Website Protection, Starting, 
Protection, 1/12/2017 2:34 AM, SYSTEM, -PC, Protection, Malicious Website Protection, Started, 
Detection, 1/12/2017 2:47 AM, SYSTEM, -PC, Protection, Malicious Website Protection, IP, 198.8.70.212, p.rfihub.com, 54467, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, 
Detection, 1/12/2017 2:47 AM, SYSTEM, -PC, Protection, Malicious Website Protection, IP, 198.8.70.212, p.rfihub.com, 54468, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, 
Detection, 1/12/2017 2:47 AM, SYSTEM, -PC, Protection, Malicious Website Protection, IP, 198.8.70.212, p.rfihub.com, 54467, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, 
Detection, 1/12/2017 3:37 AM, SYSTEM, -PC, Protection, Malicious Website Protection, IP, 198.8.70.212, a.rfihub.com, 59081, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, 
Detection, 1/12/2017 3:37 AM, SYSTEM, -PC, Protection, Malicious Website Protection, IP, 198.8.70.212, a.rfihub.com, 59081, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, 
Scan, 1/12/2017 3:43 AM, SYSTEM, -PC, Manual, Start:1/12/2017 3:34 AM, Duration:9 min 13 sec, Threat Scan, Completed, 0 Malware Detections, 0 Non-Malware Detections, 
Detection, 1/12/2017 3:46 AM, SYSTEM, ANTHONY-PC, Protection, Malicious Website Protection, IP, 198.8.70.212, p.rfihub.com, 59705, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, 
Detection, 1/12/2017 3:46 AM, SYSTEM, -PC, Protection, Malicious Website Protection, IP, 198.8.70.212, p.rfihub.com, 59705, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, 
Detection, 1/12/2017 3:46 AM, SYSTEM, -PC, Protection, Malicious Website Protection, IP, 198.8.70.212, p.rfihub.com, 59707, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, 
Protection, 1/12/2017 4:02 AM, SYSTEM, -PC, Protection, Malware Protection, Starting, 
Protection, 1/12/2017 4:02 AM, SYSTEM, -PC, Protection, Malware Protection, Started, 
Protection, 1/12/2017 4:02 AM, SYSTEM, -PC, Protection, Malicious Website Protection, Starting, 
Protection, 1/12/2017 4:03 AM, SYSTEM, -PC, Protection, Malicious Website Protection, Started, 
Detection, 1/12/2017 4:04 AM, SYSTEM, -PC, Protection, Malicious Website Protection, IP, 198.8.70.212, p.rfihub.com, 49726, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, 
Detection, 1/12/2017 4:04 AM, SYSTEM, -PC, Protection, Malicious Website Protection, IP, 198.8.70.212, p.rfihub.com, 49726, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, 
Detection, 1/12/2017 4:04 AM, SYSTEM, -PC, Protection, Malicious Website Protection, IP, 198.8.70.212, p.rfihub.com, 49732, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, 
Protection, 1/12/2017 4:06 AM, SYSTEM, -PC, Protection, Malware Protection, Starting, 
Protection, 1/12/2017 4:06 AM, SYSTEM, -PC, Protection, Malware Protection, Started, 
Protection, 1/12/2017 4:06 AM, SYSTEM, -PC, Protection, Malicious Website Protection, Starting, 
Protection, 1/12/2017 4:07 AM, SYSTEM, -PC, Protection, Malicious Website Protection, Started, 
Scan, 1/12/2017 4:09 AM, SYSTEM, -PC, Context, Start:1/12/2017 4:09 AM, Duration:0 min 7 sec, Threat Scan, Completed, 0 Malware Detections, 0 Non-Malware Detections, 
Scan, 1/12/2017 4:10 AM, SYSTEM, -PC, Context, Start:1/12/2017 4:09 AM, Duration:0 min 9 sec, Threat Scan, Completed, 0 Malware Detections, 0 Non-Malware Detections, 
Detection, 1/12/2017 4:16 AM, SYSTEM, -PC, Protection, Malicious Website Protection, IP, 198.8.70.212, p.rfihub.com, 49681, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, 
Detection, 1/12/2017 4:16 AM, SYSTEM, -PC, Protection, Malicious Website Protection, IP, 198.8.70.212, p.rfihub.com, 49681, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, 
Detection, 1/12/2017 4:16 AM, SYSTEM, ANTHONY-PC, Protection, Malicious Website Protection, IP, 198.8.70.212, p.rfihub.com, 49683, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, 
Detection, 1/12/2017 4:35 AM, SYSTEM, -PC, Protection, Malicious Website Protection, IP, 198.8.70.212, p.rfihub.com, 50404, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe, 
Update, 1/12/2017 4:47 AM, SYSTEM, -PC, Scheduler, IP Database, 2017.1.12.1, 2017.1.12.2, 
Protection, 1/12/2017 4:47 AM, SYSTEM, -PC, Protection, Refresh, Starting, 
Protection, 1/12/2017 4:47 AM, SYSTEM, -PC, Protection, Malicious Website Protection, Stopping, 
Protection, 1/12/2017 4:47 AM, SYSTEM, -PC, Protection, Malicious Website Protection, Stopped, 
Protection, 1/12/2017 4:47 AM, SYSTEM, -PC, Protection, Refresh, Success, 
Protection, 1/12/2017 4:47 AM, SYSTEM, -PC, Protection, Malicious Website Protection, Starting, 
Protection, 1/12/2017 4:47 AM, SYSTEM, -PC, Protection, Malicious Website Protection, Started, 

(end)

Edited January 12, 2017 by mogly

[LindaC]

protection log

protectionlog.txt

[MysteryFCM]

Much appreciated, thank you. The block will be removed on the next update.