My vBulletin got Hacked

[vivaciti]

Hi,
I have had one of my users email me to say the forum has been hacked by a user whos name is not in my list of curent users.
I can not get access to the forum or the admin screen.
Looking at the logs I can see someone access the forums from a proxy with this command: http://vivaciti.net/forum/misc.php?do=bbcode
after doing a goole search for the server IP and the words http://search.live.com/results.aspx?...etin&go=Search

I have removed write access to the forum dir to see if that helps, but seems I am still locked out.

Anyone help at all, as I dont know what to do (new VB user only since Feb)

[Jake Bunce]

You can regain admin access with the tools.php file. First register a new account on your forum. Then go into the do_not_upload folder in the zip file. Upload the tools.php file to the install directory on your server. Run the tools.php file in your browser and select the option to reset admin access for your user.

Here are several security tips:

http://www.vbulletin.com/forum/showthread.php?t=194701

[dboogie2288]

I feel you buddy, they did the same to me a few nights ago. I'm STILL picking up the pieces.