Trojas horse in payment api

[nanox]

Hello guys,

i have just registered with CCbill and my account is ready to process payments, however, when i go to the payment API manager i get a warning from my anti virus saying it has just blocked a trojan horse.

Just 1,5 weeks ago i got hacked by some saudi arabian who did a SQL injection. I dont know if this has anything to do with this.

I have attached a picture showing what i see after turning of my computers firewall and re-entering the payment API manager and the subscription manager.

The white fields is my servers ip adress.

Do you guys know how to solve this?

[ozzy47]

So when you got hacked, did you do all of the following?

First you need to follow our advisory about deleting the install folder off your forums.

Then please read the following two blog posts:
http://www.vbulletin.com/forum/blogs...ve-been-hacked (http://www.vbulletin.com/forum/blogs/zachery/3993888-fixing-your-site-after-you-have-been-hacked)

http://www.vbulletin.com/forum/blogs...vbulletin-site (http://www.vbulletin.com/forum/blogs/zachery/3993849-best-practices-for-securing-your-vbulletin-site)

Also please see these recent security announcements:

vBulletin 4.1.x-4.2.x & All versions of vBulletin 5: http://www.vbulletin.com/forum/forum...-1-vbulletin-5 (http://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/3991423-potential-vbulletin-exploit-vbulletin-4-1-vbulletin-5)
vBulletin 5.0.x patch released, for a different security issue: http://www.vbulletin.com/forum/forum...d-all-versions (http://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/3993204-vbulletin-5-connect-security-patches-released-all-versions)

[nanox]

Okey, so i just did all the steps in the first link you posted.

I still have the same error....