Yeah that's what it looks like, just some fool running a few scripts, I woudln't worry too much about it. Sad thing is, there isn't much you can do about this kind of thing, just gotta make sure you keep everything updated.
yeah good to always protect your admin areas with .htaccess using an .htpasswd file secondly your database probably still is intact, get a mysql dump and check out whats going on in the tables. if they gained access to your server however depending whether or not you use CPanel your probably screwed.
Crap, this is the kind of shit that really brings me down. I hate crackers (actual hackers are what we know as coders, or at least thats what they say) bunch of idiots going around, screwing with other people's work. Any recommendations on anti-hack software for my upcoming site? or security requeriments I should ask for when getting the hosting? Is because hacking a known framework is way easier than an unknown custom site. There must be guides to hack vbulletin...