VBulletin 4.2.2 hacked; is it safe ?

[t2cervens]

hi

This morning (19 oct), one mod warned me that my website was hacked and defaced; in fact
the content of the website was deleted (only a few files left and empty directories)

this website had just a couple of static html files with some photos and a forum ( VB 4.2.2) all plugins disabled, no blogs no CMS etc.. ( I disabled everything during the latest update from 4.2.1 to 4.2.2); nothing else on the website,no apps too or scripts, and of course install directory was deleted..

at this time, the main directory (home) of the site contained 2 files: index php and changelogs.php (or something like that) I was unable to download this last one ( blocked by avast as trojan) and I remotely deleted it; I put the website offline too

Q: is vbulletin safe, is there a security problem ?

actually I'm trying to restore a backup ( 6 weeks old)

any suggestion/idea please now?

thanks

Terry