[tbworld]

Please make sure you pay attention to section 7. I have found many users rush over this section and end up reinfecting their site.

Step 7, Final Cleanups:

Lastly, sometimes malicious hackers will do much more simple things, like edit your templates, notices, announcements, user titles, etc. Depending on what they’ve done, will require you to go and clean up each.

Check your notices, AdminCP > Notices > Notice Manager, make sure everything looks correct.

Check your Announcements, AdminCP > Announcements > Announcement Manager, make sure everything here looks correct.

Check your templates, this can be tricky, but a quick fix would be to add a new style, AdminCP > Styles & Templates > Style Manager > add New Style, then go into the Settings > Options > Style & Language Settings and set it as the new default style. You can then take the time to fix your old styles, or remove them. You’ll have to manually review any customized templates in your style, and make sure they haven’t been modified.

You should also re-import the master style, if you didn’t already run the upgrader. AdminCP > Styles & Templates > Download / Upload Styles, you’ll need to browse and choose the master vbulletin-style.xml from your local vBulletin zip package files, then import it.

Next, check your Ads, AdminCP > Ads > Ad Manager, make sure all of the ads still have your ad code in them.

After that, you’d also want to do a quick review of your usergroup permissions, and user titles: AdminCP > Usergroups > Usergroup Manager, edit each usergroup and double check their permissions. Then check the user titles, AdminCP > Users Titles > User Title Manager. You should also check ranks, AdminCP > User Ranks > User Rank Manager