Page 1 of 2 12 LastLast
Results 1 to 10 of 19

Thread: Google search for knoppix forum ends up on firestore72 sometimes

  1. #1
    Senior Member
    Join Date
    Nov 2011
    Posts
    127

    Google search for knoppix forum ends up on firestore72 sometimes

    It doesn't always happen, but sometimes, when I do a search with firefox 21, knoppix 7.0.5, from the google.com site for knoppix forum and then I click on the first result, instead of going to this forum, I end up on:

    http://filestore72.info/download.php?id=a0cd929c

    very strange, does not happen each time, but happened several times and I watch carefully what I click on.

    If I click the back button and click again, I end up properly on this forum. Wonder if the form or my software may have been hacked. No real harm, just click the back arrow and select again, but weird.

    Wonder if anyone else has observed this?

  2. #2
    Administrator Site Admin-
    Join Date
    Sep 2008
    Posts
    174
    I don't seem to see any problem, Dave.

    This is a known issue when a site's htaccess file has been compromised. Ours seems fine. It is also caused when the user's PC has been compromised. A Google redirect can be a caused by a hijacked browser or something as simple as a compromised hosts file on a Windows PC.

    Please let us know when you've solved this.

  3. #3
    Senior Member registered user
    Join Date
    May 2006
    Location
    Columbia, Maryland USA
    Posts
    1,631
    Greetings, Dave & Clinton.

    If the unwanted URL that occurs is always (or often) the same, you might
    try adding that URL to NoScript, to see if that solves your problem.
    Last edited by utu; 05-26-2013 at 05:21 PM.

  4. #4
    Senior Member
    Join Date
    Nov 2011
    Posts
    127
    I didn't see this thread at first and created a duplicate thread. I have the same issue. Here is my experience:

    Hacked by filestore72.info?

    It doesn't seem to happen everytime, but occasionally, when I do a google search for the knoppix forum and click on the result, the first time I am redirected to filestore72.info.

    I'm not sure why this is happening or if my Linux 7.0.5, Firefox 21 or the knoppix.net/forum is causing this. Not a big deal, I, do the search again and end up where I want, but something is definitely going on - has happened for a while.

    This link: Vbulletin hacked redirected to filestore72.info sure sounds similar:
    http://www.vbulletin.com/forum/forum...lestore72-info

  5. #5
    Administrator Site Admin-
    Join Date
    Sep 2008
    Posts
    174
    Thanks for your feedback. I'll do some more digging into this to see if there's a security issue anywhere that needs to be fixed.

  6. #6
    Moderator Moderator
    Join Date
    Nov 2010
    Location
    Germany/ Dietzenbach
    Posts
    1,124
    I don't believe that there is a security issue of the forum software.

    I type in the address line of Firefox "www.google.com". Google changes the content of my Firefox address line to
    Code:
    https://www.google.de
    Now I type in the Google searchline "knoppix forum"Immediately Google changes the content of my Firefox address line to
    Code:
    https://www.google.de/#gs_rn=18
    &gs_ri=psy-ab
    &cp=12
    &gs_id=du
    &xhr=t
    &q=knoppix+forum
    &es_nrs=true
    &pf=p
    &sclient=psy-ab
    &oq=knoppix+foru
    &gs_l=
    &pbx=1
    &bav=on.2,or.r_qf.
    &bvm=bv.48340889,d.Yms
    &fp=c77708117ee4b91c
    &biw=915
    &bih=600
    The first hit for me is "Startseite - Knoppix Forum | www. KnoppixForum .de". The URL Google gives me for this site is
    Code:
    http://www.google.de/url?sa=t
    &rct=j
    &q=
    &esrc=s
    &source=web
    &cd=1
    &cad=rja
    &sqi=2
    &ved=0CC0QFjAA
    &url=http%3A%2F%2Fwww.knoppixforum.de%2F
    &ei=M-XLUcy0BIiYtQbf94FQ
    &usg=AFQjCNHY0F8VVU1L1uGqlIaziYKSxw1Awg
    &bvm=bv.48340889,d.Yms
    As you can see, Google does so many obscure things in the background, why not lead you astray?

  7. #7
    Administrator Site Admin-
    Join Date
    Sep 2008
    Posts
    174
    There have been some other vbulletin based forums that have had this problem. It's not impossible for it to happen at the server level as well as at the Google level so it's always worth checking these things.

  8. #8
    Senior Member
    Join Date
    Nov 2011
    Posts
    127
    When I have observed the redirection it has been when I'm using knoppix 7.0.5 and firefox.

    I'll test occasionally with XP - so far, no redirection with XP and firefox

    Let's try again with knoppix .... booting up...
    - did a google search for knoppix and forum - hovered over link, observed said knoppix.net/forum - redirected to filestore72.info
    - hit back button and clicked on link again
    - this time ended up on knoppix forum as I should
    - closed firefox
    - opened firefox, searched, clicked and went to forum as it should
    - shutdown and restart laptop with linux - search, click, on forum as I should
    - might be once per day, will retest on a different day But first http://www.vbulletin.com/forum/forum...lestore72-info

    The script only redirect in the first time the browser have cleaned cache and temps I'm not sure how to clear knoppix temp files, but I'll do firefox Interesting

    - interesting edit / preferences in knoppix firefox, but tools / options in xp - sigh
    - anyway, went to cnn.com, cleared recent history
    - close browser
    - opened firefox under knoppix 7.0.5, went to google, did the search for knoppix and forum, clicked on the link and redirected to filestore72.info like the post on the vbulletin said it would

    - So redirection happens if first search of the day or if clear cache

    - let's try clearing cache and clicking on a different website on the google search
    - did search for knoppix forum and clicking on linuxforums.org instead
    - browser went to linuxforums.org

    - clearing cache - google search knoppix forums
    - click on knoppix.net/forum - redirected to filestore72.info
    Last edited by Denver Dave; 06-27-2013 at 07:46 PM.

  9. #9
    Moderator Moderator
    Join Date
    Nov 2010
    Location
    Germany/ Dietzenbach
    Posts
    1,124
    Second try:
    With "knoppix forum net" in the Google search line I've got

    for the first hit
    Code:
    Forum - Knoppix
    and the URL given by Google for this site
    Code:
    http://www.google.de/url?sa=t
    &rct=j
    &q=
    &esrc=s
    &source=web
    &cd=1
    &cad=rja
    &ved=0CC0QFjAA
    &url=http%3A%2F%2Fknoppix.net%2Fforum%2F
    &ei=OoDMUZPJD4GytAb-_ICICg
    &usg=AFQjCNFlgOf9TUOBCIwIvqSfNvurjbSUog
    &bvm=bv.48572450,d.Yms
    leads me to
    Code:
    http://filestore72.info/download.php?id=a0cd929c
    for the second hit
    Code:
    The Knoppix . net Forums
    and the URL given by Google for this site
    Code:
    http://www.google.de/url?sa=t
    &rct=j
    &q=
    &esrc=s
    &source=web
    &cd=2
    &cad=rja
    &ved=0CDgQFjAB
    &url=http%3A%2F%2Fknoppix.net%2Fforum%2Fforums%2F3-The-Knoppix.net-Forums
    &ei=OoDMUZPJD4GytAb-_ICICg
    &usg=AFQjCNHuY84bYCFnCvYkMd10jQQI2FKVIA
    &bvm=bv.48572450,d.Yms
    leads me to
    Code:
    http://knoppix.net/forum/forums/3-The-Knoppix.net-Forums

  10. #10
    Senior Member
    Join Date
    Nov 2011
    Posts
    127
    XP Firefox fooled me - with XP, firefox 22 - cleared cache first and duplicated the redirect. Might mean knoppix is off the hook.

    On knoppix 7.0.5 - opened iceweasel instead of firefox and duplicated the redirect with iceweasel to infostore.

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  


Cisco WS-C3560CG-8PC-S 8 GE PoE 2x Dual Uplink IP Base Switch MW3G1 picture

Cisco WS-C3560CG-8PC-S 8 GE PoE 2x Dual Uplink IP Base Switch MW3G1

$149.00



WS-C3560X-24P-S Cisco 3560X Series 24-Port PoE Switch W/ C3KX-PWR MW3J4 picture

WS-C3560X-24P-S Cisco 3560X Series 24-Port PoE Switch W/ C3KX-PWR MW3J4

$119.00



Cisco Catalyst 3850 48 PoE+ WS-C3850-48F-L Switch 2x Cisco PWR-C1-1100WAC LOT picture

Cisco Catalyst 3850 48 PoE+ WS-C3850-48F-L Switch 2x Cisco PWR-C1-1100WAC LOT

$299.99



Cisco Catalyst WS-C3750-48PS-S V05 48-Port Gigabit Ethernet Network Switch picture

Cisco Catalyst WS-C3750-48PS-S V05 48-Port Gigabit Ethernet Network Switch

$49.99



Cisco Catalyst 2960 Series 48 Port Gigabit Ethernet Switch WS-C2960+48TC-L V02 picture

Cisco Catalyst 2960 Series 48 Port Gigabit Ethernet Switch WS-C2960+48TC-L V02

$39.99



Cisco Catalyst WS-C3750G-12S-S V08 / 3750 Series Managed Networking Switch picture

Cisco Catalyst WS-C3750G-12S-S V08 / 3750 Series Managed Networking Switch

$59.99



CISCO N9K-C92160YC-X NEXUS 48 PORT  SWITCH TESTED & RESET picture

CISCO N9K-C92160YC-X NEXUS 48 PORT SWITCH TESTED & RESET

$2499.99



Cisco Catalyst 3650 Managed GBE 4x1 1G Uplink WS-C3650-48FS-S PoE+ SFP picture

Cisco Catalyst 3650 Managed GBE 4x1 1G Uplink WS-C3650-48FS-S PoE+ SFP

$279.99



Cisco Catalyst WS-2960 48 Port Gigabit POE Ethernet Switch WS-C2960+48PST-S picture

Cisco Catalyst WS-2960 48 Port Gigabit POE Ethernet Switch WS-C2960+48PST-S

$99.99



NEW Sealed Cisco SFP-10G-LR 10GBASE-LR SFP+ 1310nm 10km *US Shipping* picture

NEW Sealed Cisco SFP-10G-LR 10GBASE-LR SFP+ 1310nm 10km *US Shipping*

$24.00