Any way to tackle md5(md5($password).$salt)?

[mastercracker]

ukyang, the format is like you wrote Hash:Salt. If your hash is really Vbulletin then your salt is probably in hex format. You have to use -m 2611 (for Vbulletin with 3 characters salt) and the switch --hex-salt
and it should work.