Also dont forget to change your cpanel password

The first attachment says: May god ++++ your forums, enough of this you dog your tiring me, watch me admin.

Second attachment says: ill play Bank admin, Your disappointing forum has been hacked, i will now change the index file, wait a while.

just wanted to help, don't take this the wrong way, if you do. Sorry...

this happened to me and you cant stop it no matter how hard you try. Once they have injected the database that is it. I had to restart fresh :(

ok, here's the latest, I installed a backup from two weeks ago, 7/11/07. I then updated to the newest versions, I changed all the pws, I then changed the names of my admin and modcp folders etc in the config. I set my admins id #'s in the config file so they can not be edited etc. I dont allow html etc. Now, for the .htpassword or whatever, how do I do that, Im not too familar with it. Should i password protect anything else etc.

Cpanel contains a utility that helps you with that click "password protect directorys" also you have two installers in a web accessible location that's asking to mess your board up delete those installers !!

Look in cpanel for password protect directorys

actually i just saw that and am trying and testing that now.

Ok, i just pw protected my cgi-bin folder, my admin and modcp folders. anything else?

I think I might have it pretty tight now, unless you guys can recommend anything else

WOW, talk about a security risk. Why have these installation files not been deleted? Thats asking to be hacked - handed on a plate!

K, those have been deleted. MRGTB, im not a coding pro etc, I posted on here for your help and I appreciate everyone's responses, as I feel my site is 100x more secured now because of your help.

well, lastnight, after i did the security fixes etc, I got the big...you've been hacked page on the index page. figured that was coming. I uploaded a backup etc, did all the security fixes etc. Anyone here experienced to look at my database and see if any files are there which arent supposed to be, there must be something there for them to keep getting access to the backend. I have it locked up tight, it's a pain even for me to get there lol

my aim is TN Zazza

I just removed the install and installer folders from my server, just downloaded them to my pc and removed them from online. Figured this would be a potential place to try and mess up

What i did is delete alot of mods that I was not really using anymore etc and am trying to clean up the board some. Here is my diagnostics list now, see anything bad, let me know:

Root:
arcade.php
fixoptions.php
mm_menu.js
modelapp.php
template.htm
vbfavorites.php
vbgarage.php

Clientscript:
activecell.htc
ncode_imageresizer.js

Admin:
arcade.php
vba_cmps_admin.php

Includes:
adminfunctions_links.php
adminfunctions_vba_cmps.php
class_dm_itrader.php
class_ucs_core.php
datastore_cache.php
functions_links.php
functions_ucs_shared.php
vba_cmps_include_bottom.php
vba_cmps_include_error.php
vba_cmps_include_template.php
vba_cmps_include_top.php
vba_cmps_plugin_newpost.php

Includes/Cron:
articlebot_vbcron.php
links_search.php
links_subscriptions.php
rsvp_notify.php
vba_global_error.php

Includes/XML:
bitfield_comments.xml
bitfield_profileviews.xml
cpnav_arcade.xml
cpnav_rpm.xml
cpnav_ucs.xml
cpnav_vbacmps.xml
hooks_ibproarcade.xml
hooks_v3arcade.xml
product-ibproarcade.xml

These are the ones that get the "File not recognized as part of vBulletin" message when I run the diagnostics. As you can see, a bunch of them are from my vbadvanced being installed.

Appreciate the input.