MyBB Community Forums

Hi,
I use MyBB version 1.6.5 and an user that visit the forum alerted me that his antivirus detected two viruses:
-Trojan:JS/Alescurf.D
-Exploit:HTML/IframeRef.Z

My questions are:
How can the forum take virus?
How can I protect my forum?
Regards.

What's your forum URL?

http://www.team-speak.it/forum/index.php
(I have just uploaded again some files trying to overwrite the viruses like index.php and all .js files)

check for any corrupt files thru file verification tool available in tools & maintenance section of admin panel ...
also check for any malicious files at your files server (can be above MyBB folder level) - if you are unsure then ask web host for help ...

I've replaced all corrupt file, but how can happen that viruses infect files .php or .js? Is an hosting vulnerability or a Mybb vulnerability?

experts here said that MyBB 1.6.5 has no known major vulnerabilities ; malware affections could be due to insecure plugins / insecure web host ..