Well, I've just noticed another hacked board of a user of these forums - http://threadsdev.net

Poor fella has 4 iframes that almost locked out my computer. I had only 2.

I think this evil genius is finding his targets using Google. Maybe a simple filename renaming of the key files like ubbthreads.php could help for now?