my site is hack... need some urgent help
 

my site is hack because my account and other staff account were taken through fake log in... now i got my account back and restored all the damages that was done but there's one thing i cannot edit... i can't locate where he place his header because he was only able to access the admincp and not the cpanel and ftp... also when you're on idle you will be redirected to another site...

what could have he edited to have made this redirecting.

I attach some screenshot below showing the banner that its located in imageshack and not in my files...

Thank You

Attached Images http://www.vbulletin.com/forum/images/attach/jpg.gif hacked.JPG‎ (46.7 KB)