my site is hack... need some urgent help

[BHATUGAN]

i already ask this question from vbulletin.com and even made a ticket but still no replies.. i hope i get replies here....

my site is hack because my account and other staff account were taken through fake log in... now i got my account back and restored all the damages that was done but there's one thing i cannot edit... i can't locate where he place his header because he was only able to access the admincp and not the cpanel and ftp... also when you're on idle you will be redirected to another site...

what could have he edited to have made this redirecting.

I attach some screenshot below showing the banner that its located in imageshack and not in my files...

Thank You

[Dismounted]

BHATUGAN,

You are currently showing up as unlicensed.

To be able to download modifications and/or receive support here at vBulletin.org, we ask you to please click here (http://members.vbulletin.com/membersupport_priority.php) (vB-Germany users click here (http://members.vbulletin-germany.com/membersupport_priority.php), vB-Chinese users click here (http://members.vbulletin-china.cn/membersupport_priority.php)) and enter your email address. You will need to use your customer number and password (which will be in the email you got when you paid for your license) to access that page. Please note that your email is case sensitive.

To protect our customers privacy you will also need to Opt-In to license validation for all Support Sites. You must authorise vBulletin.org in order to validate your license status here. You can do this at the page linked above for your distributor. Make sure to set the permission to allow vBulletin.org to validate your status.

The update of your account can take up to one hour.

Thank you.