Results 1 to 21 of 21
  1. #1
    mtbr member
    Reputation:
    Join Date
    Mar 2013
    Posts
    35

    google referrer redirections to myfiletore.com

    Recently I've noticed that around 1 in 5 click throughs from google.com to forums.mtbr.com/29er-bikes/ redirect to myfilestore.com

    Steps to reproduce:

    1) Google for "29er" or "29er forum" (google results vary based on your history)

    2) Click the link for forums.mtbr.com/29er-bikes/

    3) Intermittently you will be redirected to MyFilestore.com - Your File Hosting

    If you are unable to observe this behavior clear your browser cache or try a new browser.

    I have observed this issue with both Chrome and Opera on both Windows 7 and Ubuntu 12. I have ran malware scans on my Win7 machine but have not run malware scans on my Ubuntu machine. I've also observed this issue from multiple locations, work and home. Here is one IP address you can use to search through the logs:

    76.242.156.217

    Access and redirect time was ~ 18:50-18:55 EST

    If there are any questions let me know. Thanks!

  2. #2
    mtbr member
    Reputation:
    Join Date
    Mar 2013
    Posts
    35
    Further investigation indicates that this is likely an injection that takes advantage of a poorly written VbSEO function that allows the PHP register_globals to be abused:

    Introduction to Security Basics: 123filestore and url123 redirection issues, what caused it and how to prevent it. - Blogs - vBulletin SEO Forums

    A discussion about the myfilestore injection specifically:

    Still getting the MyFilestore.com redirect.. - vBulletin SEO Forums

  3. #3
    workin' it Administrator
    Reputation: rockcrusher's Avatar
    Join Date
    Aug 2003
    Posts
    8,110
    I got this too and I will alert the Site Admin. Thanks for doing the research BTW!
    Try this: HTFU

  4. #4
    mtbr member
    Reputation:
    Join Date
    Sep 2012
    Posts
    48
    This happened to me a couple of times as well.

  5. #5
    Code Monkey Administrator
    Reputation: MikeG's Avatar
    Join Date
    Oct 2002
    Posts
    660
    We're looking into it. Hopefully fixed up and back to normal within an hour or two.

    Excellent diagnosis salt_fish. Thanks for the detailed replication steps.
    "Cycle tracks will abound in Utopia" - H.G. Wells.

  6. #6
    banned
    Reputation:
    Join Date
    Aug 2012
    Posts
    2,041
    Snicker

  7. #7
    mtbr member
    Reputation: Reign2Rider's Avatar
    Join Date
    Jan 2010
    Posts
    281
    I get this too. Still happening as of 2 mins ago.

  8. #8
    mtbr member
    Reputation:
    Join Date
    Aug 2011
    Posts
    17
    Same here. Happened just now.

  9. #9
    No Stranger to danger....
    Reputation: Tone's's Avatar
    Join Date
    Nov 2011
    Posts
    5,530
    Happening to me too just halfa hour ago, cheers
    Dont ever let the truth get in the way of a funny story....

  10. #10
    swag ho Administrator
    Reputation: francois's Avatar
    Join Date
    Aug 1996
    Posts
    18,331
    Ok, looks like the fix is in.

    Can you guys try again? If it still happens clear cache and close browser just to be sure.

    fc
    IPA will save America

  11. #11
    mtbr member
    Reputation:
    Join Date
    Mar 2013
    Posts
    4
    Quote Originally Posted by MikeG View Post
    We're looking into it. Hopefully fixed up and back to normal within an hour or two.
    Just happened to me, again

  12. #12
    banned
    Reputation:
    Join Date
    Jan 2012
    Posts
    404
    MTBR can't just leave the forum like it was, ain't it? I normally hate Pinkbike, but +1 for PB because no stupid adverts or any other stupidity imo.

  13. #13
    mtbr member
    Reputation: iamkeith's Avatar
    Join Date
    Feb 2010
    Posts
    500
    Just replying to let you administrators know it's still happening as of now. I get it about 1/4 of the time, so it's getting worse if anything. Appears to be when trying to access through google search results. I kind of freaked out for a while, thinking I had a virus - until some web research suggested it is a common problem with forum software, as others have noted.
    We still hang bike thieves in Wyoming [Pedal House]

  14. #14
    No Stranger to danger....
    Reputation: Tone's's Avatar
    Join Date
    Nov 2011
    Posts
    5,530
    Yep im still getting this, just got it then, trying to link me to a free computer, then to my file what ever that is, its been going on for about a month now, needs to be seen to, cheers
    Dont ever let the truth get in the way of a funny story....

  15. #15
    Code Monkey Administrator
    Reputation: MikeG's Avatar
    Join Date
    Oct 2002
    Posts
    660
    The main issue is that it is very hard to replicate consistently. If you get this redirect, please post what you were searching for. We'll still monitor this issue.
    "Cycle tracks will abound in Utopia" - H.G. Wells.

  16. #16
    mtbr member
    Reputation:
    Join Date
    Mar 2013
    Posts
    35
    The vbseo forums have a lot of information on this exploit.

    Filestore Redirect Hack - How to Fix Your Forum - vBulletin SEO Forums

  17. #17
    mtbr member
    Reputation: Reign2Rider's Avatar
    Join Date
    Jan 2010
    Posts
    281
    Still happening just now. Came from google.co.uk search for "mtbr" - link address was - forums.mtbr.com
    Getting quite annoying now...

    Just tried it again twice and it was fine so doesn't happen every time which obviously makes it harder to trace. Not good though, nothing to stop it going to a dodgy website, in fact the site it goes to has several pop-ups "you've won $1m" etc so is already NOT a site i wish to go to. Who knows what malicious scripts etc on the redirect site. Please look into it some more.

  18. #18
    two wheel whore
    Reputation: Shmoo's Avatar
    Join Date
    Mar 2008
    Posts
    473
    Yep still happening.

  19. #19
    mtbr member
    Reputation:
    Join Date
    Jun 2009
    Posts
    483
    Just happened to me again just now.

  20. #20
    No Stranger to danger....
    Reputation: Tone's's Avatar
    Join Date
    Nov 2011
    Posts
    5,530
    searched for MTBR got redirected to my file just now, again..
    Dont ever let the truth get in the way of a funny story....

  21. #21
    mtbr member
    Reputation: rustybkr's Avatar
    Join Date
    Mar 2010
    Posts
    384

    Re: google referrer redirections to myfiletore.com

    Lol, Just happened to me again:thumbdown:

Similar Threads

  1. Google search box gone?
    By Mikecito in forum Site Feedback/Issues
    Replies: 3
    Last Post: 06-09-2012, 08:56 AM
  2. google maps app?
    By guppie in forum Vacations & Destinations
    Replies: 3
    Last Post: 05-18-2012, 08:10 PM
  3. Google+ invites!
    By Steviepoo in forum General Discussion
    Replies: 0
    Last Post: 07-21-2011, 05:19 AM
  4. Anybody pedaling for Google?
    By zorg in forum California - Norcal
    Replies: 10
    Last Post: 03-02-2011, 01:04 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may edit your posts
  •