Malicious script being inserted before our templates...
 

There is a malicious javascript that has been inserted into our vBulletin pages. It appears at the very top of the source code before the DOCTYPE declaration. What VB files could I possibly find the malicious code in that would insert the text before my templates?