how i can remove this shell plz help

[Hema-Sama]

hi guys

i found shell on my site in

admincp/subscriptions.php

here is the shell screenshot

how i can remove it

 

[bluescorpion]

Is this a DGT version of vBulletin? If not, you need to get it and replace your vBulletin files with new/clean ones from a valid DGT release. BTW, more likely than not, your system is compromised by the bad guy. Change all your passwords too, including your database access. Go over you whole site and pay attention to file mod dates that have been changed recently and check them for the shell shit too.

 

[Hema-Sama]

ok thanx mate i found it a plugin and i removed it

 

[bluescorpion]

You have to understand that deleting the plugin may not solve the badguy accessing your site. Where did the plugin come from, did the badguy install it? What vBulletin distribution do you have installed? It appears to be vulnerable OR possibly hacked before you installed it.