666 is less secure than 755 (or 775 for that matter), and there's no real reason for a hacker to have modified your files so. I still looks like a crummy tar and restore job. Or just some sloppy admining. You said people had FTP access. Maybe one of them did it, especially if you didn't change the password when they were done moving your site.
I don't bother with ICQ. If you trust your host, then you trust them. If not...
To be fair, when this happened to me I was on a virtual plan. I switched to a dedicated plan for a few months, and fewer really bad mistakes happened.
|