Getting Hacked and Hacked

[GinjiAmano]

Hi everyone. We got big problems.

During these past 2 weeks we've been hacked more than 1 time a day by a i-dont-have-a-social-life young idiot. We're searching for a solution, but we are still in trouble.

Currently, we have the version 3.5 of the board. Before this, we were running on a 3.0.1 with a bunch of hacks on it, like ushop, vbgarage, w3arcade. Attacks have begun when we were using version 3.0.1. Despite we cleaned the board, deleting potential exploit and dangerous hacks, the attacks continued.
Can someone please tell us how to avoid these attacks, if there are some new patch or so and stuff like this?

we're out of patience.

Thanks all!

[Elpie]

There are published security advisories for the 3.5x releases and the latest release is 3.61. I would advise updating as quickly as possible as many of those security alerts also contain the method used to hack vB.

If hackers have been in on your server space you really need to go over it carefully to make sure you have erased any files they may have installed. There is not much point upgrading if hackers have left a backdoor into your server space.

[curriertech]

3.6.x has a diagnostic tool in the AdminCP that will tell you which files have been altered or are not part of the base vBulletin installation. This might help you find the offending script or file if that's how they're getting in.