The reason i am suggesting this is that you have no knowledge on what he did or if he had access to filesystem. In the last case he could have changed any file (not only vB) or have left scripts on locations that you didn't even notice that could give hime access again.
I doubt that he got access through vB in the first place, unless it was by a weak login or a keylogger at the PC of one of your admins.
|