Google redirecting to filestore123.info

Again, this is not just vBSEO and probaby not even just vBulletin:

Google Sent 20,000+ Hacked Notification Messages To Webmasters Today
by Barry Schwartz
Apr 16, 2012

Google’s head of the webspam team, Matt Cutts, announced on Twitter that they have sent out new message notifications to 20,000 web sites that are hacked.

Specifically, Google sent these messages to sites doing “weird redirects.” I’ve personally seen a spike in the number of sites redirecting from their web site to a non-authorized site recently. The webmaster is typically unaware of this redirect because the redirects only occur when someone clicks from Google’s search results to the web site. Typically the site owner doesn’t go to Google to find his web site; the site owner goes directly to the site.

To help webmasters and site owners become aware of this hack, Google has sent out messages to about 20,000 sites effected by this to give them the heads up.

Here is Matt Cutts’ tweet:

Matt Cutts @mattcutts

Is your site doing weird redirects? We just sent a "your site might be hacked" msg to 20K sites, e.g. goo.gl/S6Ptk
16 Apr 12

For more on hacked sites and malware, see this Google document.

The referenced Google document has some suggestions for sanitizing infected sites.

Still happening to me, followed all instructions as well.

IMO it's a little odd that the first thing to change is my vBSEO rewrite rules.

I posted this info in the chitchat area but I noticed tonight that the Google homepage info was displaying an unusual background image that appeared to be broken with the base64 shown in the information. Anyone using Firefox can view this info via the menu bar Tools > Page Info > Media

I've also viewed the source code for google.co.uk homepage and there does seem to be an awful lot more code than I remember from years back.

I just hope that I'm wrong about this!

I have this problem. Where is the fix for it? I'm not searching through 15 pages, I would have assumed there should be a sticky for this fix since it seems so common?

Originally Posted by sworld

I have this problem. Where is the fix for it? I'm not searching through 15 pages, I would have assumed there should be a sticky for this fix since it seems so common?

- There is one post on this thread that covers most of the topics
- Check for that footer image, see my post history
- Note; we did it all, but the problem did not stop until we updated VBSEO.

Originally Posted by drift444

- There is one post on this thread that covers most of the topics
- Check for that footer image, see my post history
- Note; we did it all, but the problem did not stop until we updated VBSEO.

The most important part here is that you need to update VBSEO 3.6.0 to VBSEO 3.6.0. There was a sight update and the version was never changed. At least I'm pretty sure.

terrible news,

our footer was edited again to add this file

"
src="http://hqhrt.com/content/72/tran.jpg"
"
I only see the warning when I view the site my cell phone

php was just updated, we will see if this helps with the footer issue

Guys, sign up with Sucuri.net. They got rid of this exploit on my politics forum and the backdoors associated with it. This had been a major pain and had pretty much toasted our traffic.

Now patched up VB 4 and VBSEO to the latest releases and so far all good.

Yes, I'm using sucuri.net also and they were able to detect and fix problem for me so I agree with you is totally recommended.

See Url123 Redirect. Tried everything, I am at wits end.