yah, that is the problem

here is what happens.. pre security patch, the hacker leaves backdoors, so he really doesn't need ubb anymore to get in.

he goes away and tries other sites.

comes back and deposits more 'goodies'

so you'll need shell to find the CAUSE and not just treat the SYMPTOMS

wink