Quote Originally Posted by William Palmer View Post
What you need to do is contact your hyosting provider and secure there system from shells more he possibly uploaded it cause of a exploit on one of your scripts go and check them for any security issue.
Maybe that guy had his password of cPanel and uploaded shells on many places ? , And named them with smart names not some random name like "r57" or "shell" ... Today on internet every kid has stealer , and It's so spreaded that almost everyone got infected. So I would suggest you to download your SQL database. And replace all vBulletin core files with new ones. And check file content of every folder of your skins directory.

Many sys admins aren't really smart enough to secure their server. So It would be just a fail , they would say Our server is secured , etc...