Vbulletin Assistance

[Nocturnal222]

We got hacked on vb4.1.7 version, so we upgrade to 4.1.8 (fresh install) but still they manage to hack us, changing index.php and forum.php by defacing it and also they generate all users password with a php file and text file which made a new profile.php on admincp folder and it contains all users passwords.

what should i do?

-m

[WEBDosser]

who has access to the server or cpanel? .. change ALL passwords for everything too.

[Nocturnal222]

server? our admin but for admincp.. around 10 of us.

[owning_y0u]

server? our admin but for admincp.. around 10 of us.

Server ;-) and afterwards all users must change there pass including all admins.