virus inside vbulletin?
 

can someone help me out here?

i have this line of code AUTOMATICALLY inserted inside the footer of vbb

HTML Code:

After i deleted it, a few days later it appear again!!! There is noone else getting access to admin panel or server, so it has to be a script hidden somewhere inside vbb. It happenned again and again after i deleted it. We are using vbb 3.8.0.

I did a text search for "s0ft" through the whole vbb folder on server but it came out blank, hence i am asking where are the possible places that the guy might have put his script to automatically check and insert that iframe.

Thanks