Have you looked at server logs to see what commands were used? And from what possible IP? Was it a Wordpress hack using an older version? Did they hit any other sites on the box?
__________________
*****************************************
Anti-Semites have Small Penis Syndrome. The only known treatment is electroshock therapy combined with cerebellum removal. Fortunately, it’s a tiny procedure.
*****************************************
|