Close forum, uninstall all mods, take database dump, Wipe server clean, re-upload a freshly downloaded vb, re-edit config.php, dump SQL, Go.

Attachments will be an issue, may have to sacrifice them unless you move them to the DB.

Anyway, you'll have a fresh vBulletin, with no addons or altered files. If it STILL gets hacked, blame your host or look at your other scripts.

I agree with Dunham, it's the only way to be safe
Also make sure any FTP/Control panel passwords are cryptic by using an md5 password generator.

Also, rename the admin and mod panel directories as that is what they do. Password Protect them and use strong passwords (let the other admins know).

Make sure you rename the path to admin and mod panels in the config file.

Everyone has said great stuff, there are other things you can do AFTER being hacked, this article covers a few of those..

Thanks I think there are a few new things Dunham has said. However that only works if you have a blank vbulletin to start off with. There are users on my current forum and I rather not lose their information. I've applied alot of the said about and done new stuff elsewhere on the web too. So far no attacks.

I think the biggest thing I did was that I blocked all IPs from the middle-east, asia and Russia. I can do without that traffic since the majority is probably not interested in my site nor english speaking. Of course this is a temporary solution.

I went to the same problems.. here's what I did to fix my problem..

Secunia Personal Software Inspector (PSI)
http://secunia.com/vulnerability_scanning/personal/

and

Malwarebytes' Anti-Malware
http://www.malwarebytes.org/mbam.php

I realized the problem was on my computer..

Wish you the best!