Google redirecting to filestore123.info

Hi,
our forum running VB 3.86 and VBSEO has been affected by this security breach.
If you click on google search results, you're redirected to filestore123.info and asked to download some crap from there.
Is anybody experiencing the same problem? Does somebody know of any fix?

Hello ,

That has nothing to do with vBSEO. You can read Security issue and apply suggestions posted on that thread.

I've got the same issue. My google traffic has dropped by 60% and my adsense has also been killed. What's the suggestion? Thread has over 300 posts. I went almost blind looking for a fix. Can someone point me to instructions on how to fix this problem? Pages indexed in google that point to my site get redirected to some POS filestore123.info crap!

I highly suggest reading through that whole thread. It is a bit of an unorganized mess, but it has all your answers.

IF there's anyone that went through this exercise and could write a quick HOW-TO it would be tremendously appreciated. Seems a lot of people would benefit from this. With kids crawling all over, I just don't have that kind of time nor possibility ATM to sift through 300+ posts. Seems suggestions given are obsolete 10 pages later. Anyhow, like you pointed out it's an "unorganized mess".

The issue focuses on a lack of server security and incorrect file and folder permissions. It is not an issue with the vbseo software and is thus outside of our official support realm. There are tips in the thread on how to fix your issues, clear your plugin, and lock down your site so it doesn't happen again.

we had VBSEO reinstalled to fix this problem.. everything was back to normal but after a few days the problem returned.

Originally Posted by Brian Cummiskey

The issue focuses on a lack of server security and incorrect file and folder permissions. It is not an issue with the vbseo software and is thus outside of our official support realm. There are tips in the thread on how to fix your issues, clear your plugin, and lock down your site so it doesn't happen again.

can you please summarize what needs to be done?

Hello Alex ,

Basically you need to secure your writable files and folders. Additionally should change all passwords on all Admins on your site. Additionally if you are using vB_Datastore_Filecache i strongly advise you to change your datastore cache mehod.

Originally Posted by Mert Gökçeimam

Hello Alex ,

Basically you need to secure your writable files and folders. Additionally should change all passwords on all Admins on your site. Additionally if you are using vB_Datastore_Filecache i strongly advise you to change your datastore cache mehod.

which files and folders are writable? How can I tell if we are using vB_Datastore_Filecache? And if so, which cache method do you suggest?

Anything that is chmod 777 or 666 is writable.

You can see what type of cache you're using (or not) from the vb config file.

We generally recommend xcache

Originally Posted by Brian Cummiskey

Anything that is chmod 777 or 666 is writable.

You can see what type of cache you're using (or not) from the vb config file.

We generally recommend xcache

do we need to secure all files and folders on the site or just the ones for VBSEO?

also, what is the best way to secure the files on the server?

EVERY folder that is writable needs to be protected, regardless of what software you are running. If you allow for avatar uploads and use the file system, this folder has to be writable in order for people to get the images in there. But, this folder should not allow exectution of any scripts. There's a code bit in that thread
Protect Writable Directories

Does anyone know how the attack happens? This has been going on since 2010 so I figured it's enough time for someone to figure it out.