Been getting back up to speed on vBulletin issues- The suggestion is if you haven't already done so go to your Admin CP -> Settings -> Options -> Server Settings and Optimization Options -> and make sure the Use Remote UI is set to Google or Yahoo- if it's set to "None" there may be an exploit in your local copy.