Hacked!

[TunerNetwork]

well, lastnight, after i did the security fixes etc, I got the big...you've been hacked page on the index page. figured that was coming. I uploaded a backup etc, did all the security fixes etc. Anyone here experienced to look at my database and see if any files are there which arent supposed to be, there must be something there for them to keep getting access to the backend. I have it locked up tight, it's a pain even for me to get there lol

my aim is TN Zazza

I just removed the install and installer folders from my server, just downloaded them to my pc and removed them from online. Figured this would be a potential place to try and mess up

What i did is delete alot of mods that I was not really using anymore etc and am trying to clean up the board some. Here is my diagnostics list now, see anything bad, let me know:

Root:
arcade.php
fixoptions.php
mm_menu.js
modelapp.php
template.htm
vbfavorites.php
vbgarage.php

Clientscript:
activecell.htc
ncode_imageresizer.js

Admin:
arcade.php
vba_cmps_admin.php

Includes:
adminfunctions_links.php
adminfunctions_vba_cmps.php
class_dm_itrader.php
class_ucs_core.php
datastore_cache.php
functions_links.php
functions_ucs_shared.php
vba_cmps_include_bottom.php
vba_cmps_include_error.php
vba_cmps_include_template.php
vba_cmps_include_top.php
vba_cmps_plugin_newpost.php

Includes/Cron:
articlebot_vbcron.php
links_search.php
links_subscriptions.php
rsvp_notify.php
vba_global_error.php

Includes/XML:
bitfield_comments.xml
bitfield_profileviews.xml
cpnav_arcade.xml
cpnav_rpm.xml
cpnav_ucs.xml
cpnav_vbacmps.xml
hooks_ibproarcade.xml
hooks_v3arcade.xml
product-ibproarcade.xml

These are the ones that get the "File not recognized as part of vBulletin" message when I run the diagnostics. As you can see, a bunch of them are from my vbadvanced being installed.

Appreciate the input.