Thanks for such a detailed explanation whooami
I have two ftp acccounts one for wp and other for vbulletin.I found that both the scripts have been attacked by same iframe.Now I have started to scan my pc for virus,malwares etc.Also I cant change password from cpanel so I have requested my webhost to allow me to change passwords from now onwards.I will report in here as i proceed.