K...I'll try what you suggested...Better yet I'll ask my friend to cause he'll understand a lot more about this then I will.
Possibility: I checked the paths (clean) and I've been checking the .cgi files (so far clean). Since UBB seems untouched I'm wondering if the server itself was messed with. Every other file works except that and I don't think anyone knows our (exact) root directory for the UBB.
If this is the case then, because we do know of server vulnerabilities, the server could have been attacked. Recently we've been getting threats on our site, UBB and server. I'm going to try to contact my friend now and see if the server was touched.