Do you've a backup of your VB installation before the modifications have been done ? Then you could compare the files for any changes.
And - what the logs are saying ? Both of the webserver and the FTP. Wouldn't trust VB's own functions to check for it's own health since these files were accessible and so are untrusted - who knows if that "hacker" didn't modified them.
|