[RichieBoy67]

Originally Posted by Dave

Another easy way to find suspicious files is by logging into the FTP of your server and by sorting all files and folders by last modification date. From there see if you can find any suspicious files.

Yeah Dave, great tip. I was going to mention that as well but he had mentioned that he did the upgrade in which he uploaded all the Vbulletin files. It could be useful though to find anything else possibly.

I usually use the diagnostics and download the files that seem suspicious and do a filewide search using Notepad++. Ofcouse if there is anything on the server files or in the database he will still be in trouble.