Check admin logs to see what has been changed. As you have deleted him it will be a blank name beside what has been changed.

That's a very general idea, it will say something like this:

Does not specifically say what was changed

at the time it happened I literally went though permission by permission in an attempt to correct the damage.

Obviously, some altered settings got missed but the membership has been extremely understanding of the situation (we made a general announcement that the forum was hacked and having difficulties before anyone knew what was going on).

This particular issue was a little more serious as it affected our Vendors - industry affiliates we hope to grow with. So having them turned off would not be a good thing for us.

Again, the help is appreciated

Well hopefully the vendors will understand too, this sort of thing can happen to any site.