Need help with a high security risk warning on my forum.

[centralcoastbass]

I was running 1.1.11 and got a notice from goddady that my forum was hacked and sending out spam e-mails from my site. I did the upgrade to 1.1.12 by following there links and it seemed to work fine. My forum now says version 1.1.12 at the bottom but now has a banner at the top that says high security risk, you did not remove upgrade.php Is this message correct and from SMF or is it something the hackers did to get me to allow them to again send spam e-mails. Do you need to delete the upgrade.php file after upgrading, my forum seems to be working fine. Any help.

[JBlaze]

Just delete upgrade.php from your forum's root along with the upgrade.sql files and the error will go away.

[NanoSector]

The message just lets you know everybody can access it, thus it can be a security risk.

do as stated above.

[centralcoastbass]

Thanks, just wanted to now for sure before possibly messing up my forum.