hacked. need to locate file

[CrashdownGurl]

I know I need to upgrade and I plan on doing so as soon as I fix this problem. I'm running 3.5.2 at the moment. And my site has been hacked. It (their script) was originally in the head include portion of my styles, and I wiped all of that out. Turned the forums off, and everything looks fine. I turn the forums on and all of the themes are fine except for the main forum page which still runs the script. Where do I need to look to locate the script?

Thanks!
Emma

[Steve Machol]

Revert all your templates.

[CrashdownGurl]

I did this already

[Steve Machol]

Then download your version of vB from the members area and reupload the original files.

[CrashdownGurl]

Doing that now. I checked the logs and didn't see any access to the admin panel, which leads me to believe it was mysql injections. IF that's the case, where would I need to look besides the styles table which I've completely restored

[CrashdownGurl]

Uploaded the original files, still having the same problem.

[peterska2]

Please submit a support ticket then we can look into this.