Google redirecting to filestore123.info

Originally Posted by Brian Cummiskey

Glad you were able to figure this out. I'm not 100% certain that this is the way it always happens though.

Neither am I. But it's at least one more thing to double-check. And it does seem to have finally closed the whole for that partiular forum.

Was anyone that was hacked using any of the tufat add ons. Flash chat or os date?
I stumbled across an anomaly with my flash chat add on yesterday
Im positive I had an htaccess block on the admin area on it and because I had admin access from my forum admin panel, there was no need to allow any access there directly.
What struck me as being strange was no chat history, not even anyone with a test message and if I started a new chat room, it started off in the 80's
Last year the chat history showed everything from day one
Paul M no longer supports his integration scripts because the developer has not been seen for well over a year
From memory, the log in if you go directly, does not have a strike system if you try entering passwords

Npone of the forums I'm personally involved with had any sort of chat add-on or any "tufat" add-on (I don't even know what those are).

flash chat was notorious for having holes in it, but that was years ago, so i would hope that it would have been fixed by now

This is the flash chat home page
FlashChat - Customizable Flash Chat Room and Live Support system for your PHP/MySQL-enabled website. Try it now!

And Paul M's comment on his integration
FlashChat - Customizable Flash Chat Room and Live Support system for your PHP/MySQL-enabled website. Try it now!

If you type my least favorite term into their forum search "hacked" even on the latest release, there seemed to be holes where people could right click and see passwords

My own instillation showed the folder last being altered in March this year, but no sign of what files were edited, or changed

Im still using the links djbaxter posted for clearing the junk
I killed the local host ips on the external database connections again last night and touch wood, its not returned again in 24hrs

Got hit twice tonight with a code injection

Had the blank email from hell, early warning that a code injection had been found

Code injection location pluginlist

I found what caused last nights emails
It was a chat add on from the org, called Envolve Chat
It was causing check 4 hacking to send out emails
When you run check for hacking manually, it gave Corrupt Datastore found!
The idea of the bar is brilliant for gaining members

Damn, this bastard just got me again. 3 forums last week, Adsense sunk. Now using the references provided to try and help fix and prevent this:
Google redirecting to filestore123.info

Got me again too.

Seen a vb4 forum hit by it today. Its not only vb3 being hit

Just a heads up... I received a notification of a file injection with the vbadvanced software if you're using that as a front page. Be sure to change your sql password too once all is clean and clear.

Also VBSEO just had an update not too long ago. So be sure that's completely up to date too!

Off to check my site as it was constantly hacked too... Just to be sure.

Yup.. Still ok.

I have the same problem with VB 4 :(
How i can fix it?
This guide works for VB 4 Google redirecting to filestore123.info Or maybe i'd upgrade to the last version (4.1.10) , now i have 4.1.3

one thing i dont get, is why out of all 3 computers i have, only 1 computer is infected. alot of sites seem to be blaming vbseo. i have formatted this 1 computer twice thinking its a virus. after formatted, a few months and the damn redirection is back again. again, both of my other 2 computers are fine. that redirection thing only happens after i have deleted cache, cookies etc. i could access all forums on google just fine until i clicked my sites link on google, then it redirects to filestore. im running the latest vbseo, 3 of them on 3 forums which all have different passwords, all passwords are strong to. but all 3 sites redirect, i never thought at all it could be vbseo doing this. i really thought it was a virus on me computer, cant believe i formatted me CP twice in 6 months because of this lol. why its happens only on this computer is trippy. my other 2 computers have the same ip of course same virus protection. hmm, strange. but anyway, i guess i will try the fix here in this thread and see what happens. thx.

Originally Posted by Joe_Black

I have the same problem with VB 4 :(
How i can fix it?
This guide works for VB 4 Google redirecting to filestore123.info Or maybe i'd upgrade to the last version (4.1.10) , now i have 4.1.3

Hi Alex,

Yes, you can use that useful post as a guidance in order to troubleshoot this.

@VIP.Racing,

If you still don't come up with a working solution, please don't hesitate to contact us via ticket. We'll do our best to assist you.