Quote:
Originally Posted by Lynne
Except!!!! The following directories need to be chmod 777:
/customprofilepics
/customavatars
/signaturepics
|
If I may add - only if the options in AdminCP are set.

When disabled the permission for members to upload pictures for avatars / signatures / profiles or storing them in the database these directories can be set to 555 without any problems.
About the problem:
Reinstall everything deleting ALL old files. You may have deleted 5 shells, can you be sure your files are clean ?
Like a "hacked" server - save everything for analysis doing a complete clean reinstall by downloading all files again from the trusted source, not your local backups.
That's the only safe way - depending on how much the hacker(s) level was, additional files have been infected - better safe than sorry