manitu.
They haven't answered any of my questions yet.
It wasn't actually my site that was hacked, but a webspace for an user.
Those are inserted automatically for each new user.
Turns out an FTP access comes with it and cannot be disabled.
I didn't even know of those webspaces and still don't know how they can be accessed from the outside.
:error:
::emp::