Flagged for PHISHING

[PPhysX]

My vBulletin website keeps getting flagged by my hosting company for phishing due to the this problem:

In the following directory ./includes/paymentapi there is a file called class_paypal.php

On line 233 there is this default code:

		$form['action'] = 'https://www.paypal.com/cgi-bin/webscr';
		$form['method'] = 'post';

Somehow, vBulletin creates a directory called /paypal.com/ in the root directory, in which my webhost shuts down my site due to phishing violations.

I need urgent help with this matter, please

[Dave]

The default installation of vBulletin does not create such directory.
Either your server is infected with malware or you have a plugin installed which does this.