Yes and no, if he specified Google flagged it then they might have had "hacked" on their radar per say. I always overwrite all files before attempting to clean a hacked site then sometimes again after finding and removing shell scripts to be extra safe although I've ran into some doozies lol!
Dave is right though, a lot of factors here however explaining all those is a job for everyone but me, it's field trip time with my youngest daughter so I'll have to check back on this and help if I can in a few hours, I shall wish you good luck until then!
Some links that might come in handy:
http://www.vbulletin.com/forum/blogs...ve-been-hacked
http://www.vbulletin.com/forum/artic...vbulletin-site