apparently my forum has a shell. it is gfxsociety.net and there is a config file that keeps creating itself with the user and pass. how can this be fixed, I cant even access my website, I have to use a vpn
No, it doesn't seem to be normal
try removing the shell through ftp ....Or try going to the shell link because some shells have options to delete itself which will remove the shell,,,I can scan your forum for vulnerabilities if you like? so then you can get rid of whats causing the vulnerability.