Need urgent help - Malicious code inserted in my forum
 

Hi guys, i have a forum running Vbulletin 3.6.5 wich has been infected this week. The next code appears in the source code of the web site:

Code:

Wich is a hidden iframe that leading to http://20.edois.in server.

The code is appearing in the header menu options.
Could you let me know which php is the one for the header ?

thanks