Yea, that is my fall back. I was hoping to just move one or two files and not affect the entire site as I'm "pretty sure" that its only a few scripts. One thing that just occurred to me is to run a diff. Download the existing site, download the clean code and diff them. The configuration changes will show, AND any other changes that may have taken place during the hack.