Check your directories of PHP files for strange additions.

When a site of mine was hacked I found a default.php file in the images folder.

__________________
http://DotCom-Productions.com Website Management
http://0Grief.com Budget PHP/MySQL hosting