Spam file?

[GONUMBER6]

3 days ago I had the developer of a vbulletin add-on check my server for compatability issues. I gave this person a log in for my admincp and my ftpclient upload/download information.

I did not give my password to my server, and that has been changed now.

So I get an email from godaddy that I have sent out 1000 emails and my daily SMTP has been reached. Then I got the same error yesterday, and now today.

So, did this developer add a spam into my server or my admincp? If so, how can I find it? Since I only have about 780 registered members at this point, I have not had to adjust my SMTP relay. This is the only reason I know something was done! I am also receiving messages from bounce-backs of spams that did not go through.

How on earth can I fix this? I first need to find out if it is going out via my admincp, is there a place in admin cp that sends automatic e-mails?

Has this happened to anyone else, and how did you fix it?

Any help would be sooo appreciated! thanks!

--------------- Added 1277565126 at 1277565126 ---------------

Please Note This Was Not A Developer Here On Vb.org, It Was From An Outside Party......

[Marco van Herwaarden]

I would start by checking for Suspect Files in the maintenance tab of your AdminCP.

Also check for other files outside the vBulletin folder on your server.

[GONUMBER6]

I did not find anything out of the ordinary....

I guess I will have to pay godaddy to find the source :(. This stinks!

[Marco van Herwaarden]

Disable your plugin system and see if that makes a difference.

[Angel-Wings]

Do you've a backup of your VB installation before the modifications have been done ? Then you could compare the files for any changes.

And - what the logs are saying ? Both of the webserver and the FTP. Wouldn't trust VB's own functions to check for it's own health since these files were accessible and so are untrusted - who knows if that "hacker" didn't modified them.