Are you still having the redirect issue? If you upload a static html page and go to it, does it still redirect?

I think Lynne mentioned the database because if they didn't change any files then the only thing left is the vb database.

If they uploaded a plugin then chances are there are entries in your database that are making the redirect...

Is it possible for you to have the DB restored? Does your host take backups? If so, do that but also keep the current possibly compromised DB. Then, you can cross reference and compare any new tables or changes, delete those and possibly have repaired the DB

Also, as was mentioned above, if it is a plugin you can edit your includes/config.php file and add:

somewhere after the first line. Then you should be able to go to the adminCP and use the plugin manager to figure out which one is causing the problem and disable it.

I'd seacrh my core vbulletin php files for eval(base64 code!

Also ask your host to check the access logs for around the time that the hack happened to see what went down precisely.

have you tried the above?
do you have access to the database, or the files?

tried, didnt work.

I have access to the db and files, yes.

Can you post a link to your site?

<script>window.location='http://zamorak.net/PhaisamAndDan.html'</script>Unable to add cookies, header already sent.<br />
File: /home/trevors/public_html/Zamorak.net/includes/config.php<br />
Line: 48<br />