Google search for knoppix forum ends up on firestore72 sometimes

**Denver Dave** · 06-28-2013, 05:06 PM

Thanks for the update. Not a big deal, most people probably type in the direct url: http://knoppix.net/forums and that seems to work fine. I'll start doing this.

A little more data:

Replicated the redirect with:
XP / Chrome browser / Google search
XP / Firefox browser / Yahoo search

**soubeagi** · 06-28-2013, 07:02 PM

I've seen this happen many times - on machines running Windows as well as Knoppix itself. I always assumed it meant the server was overloaded at that particular moment, and that "firestore72.info" was the canonical name of the server that also serves knoppix.net. The workaround is to go back to the Google page and click the link again (although it would be nice if the firestore page did a proper job of explaining what happened).

**Denver Dave** · 07-02-2013, 06:22 PM

I didn't pay the filestore72 much mind either, assuming I clicked on the wrong link or something for quite some time. However, since we can now duplicate it every time on multiple operating systems and browsers after clearing the cache, it now does not seem likely related to a server load issue.

Should be possible to track down since we can duplicate with consistency. A tougher find would be if it was intermittent.

There are about a thousand posts related to infostore72.info redirect vbulletin - sounds like we are in good company:
http://www.google.com/#sclient=psy-a...ogle+vbulletin

**soubeagi** · 07-04-2013, 05:37 PM

This is the result of malicious code that was injected into the knoppix.net server, exploiting some new vulnerability in vBulletin (and possibly also Apache). Possibly the best discussion of this problem, including suggestions on how to eliminate it, is at Vbulletin myfilestore hack - Find the traces and remove them. It's very technical, but an experienced vBulletin administrator should find some useful info there.

And, just for the record, it happened to me again while I was looking up this info.