my links undesirably redirect to another website

I encounter very bad problem on my vb forum

[hamids54]

I have a health and medical forum with 40k daily visitors.

some times when I click one of my links instead of my content it is redirected to a long and weird url and shows a message that asks me if I want to cancel the url I do it but it is redirected to a #*$!o website !? if I close the url and click my url I see my content without any problem.but again after 12 hours I encounter the problem . why ? what I must do ?

[rogerd]

What platform are you running on, hamids54? Have you examined the code for any malware injection?

[hamids54]

I have vbulletin forum. no I havn`t examined for malware as yet.right now I asked server manager and forum technical manager to check it up waiting them.I do worry about my forum.

[rogerd]

Redirects to long, weird URLs sound like malware. Be sure you are at the latest patch level with your software.

[martinibuster]

Sounds like you've been hacked. Check the source code of the web page to identify what part of the page the rogue code is on. Once you know that then you can track down what template file may have been altered and then you can revert it back to it's previous state. Some of these hackings consist of code placed within an iFrame.

This is a temporary fix but if you do it fast enough you may avoid a larger problem, namely being blacklisted by Google/McAfee/Norton as being malware spewing infested website. THEN you'll really have trouble as your traffic dries up to zero. Even worse, once you fixed it you will then have to go around to all the companies that banned you and get your site off their blacklists.

Don't wait for those admins to get back to you. It's likely that it's your site that's the problem and they rarely get involved other than turning you off if they're nice and kicking you off if they're not. Fix it, and fix it fast.

As I mentioned previously, this is a temporary fix. The hackers will be back and will re-hack it. So fix it, patch up your software, patch up or remove any mods that might be the source of the exploit.

It could be worse. They could have trashed your database and made it irrecoverable.

Are you running VBSEO? VBSEO has a history of getting hacked. Do a search for VBSEO + hacked and you'll see what I mean.

[hamids54]

I received a message from google webmaster that it can`t access my website. server admin says he scanned my site and No malware hits found. yes I am using vbseo. I will ask forum
technical manager to remove it.

[martinibuster]

Imo, it's best if you FIRST do as I recommended, diagnose the problem then take steps to mitigate them. So as I posted previously, first identify the rogue code, and from the position of the code within the page, you can very likely identify the part of the template that is being altered/hacked. I gave you instructions on how to do it. You're not going to solve problems by removing VBSEO if you haven't first diagnosed it as the source of the problem. Is the version of VBSEO the very latest version? As Roger_D already suggested, check to see if the VBulletin version installed is the latest version. Do you have many mods installed? If so, any one of those can be the source. You really should diagnose this first. Then act.

[hamids54]

Thanks martinibuster

Right now I asked forum technical manager to check for any rogue code first.I am waiting him.

there is very bad situation for me.my site is hurting and on
another hand I am preparing for a exam from 8 months ago . the
exam will be 3 weeks later.I am very upset.