Check a hacked Joomla 1.5 web shop & fix login

Hi freelancers, I'm looking for somebody with Joomla web shop experience. A client has asked me to repair their hacked Joomla 1.5 website. The URL is [login to view URL] I have no experience with Joomla myself, so I need somebody that has this expertise. This also means that I have not built the website and that I do not know the architecture, e.g. used plugins and customization of the website. This is why we need a Joomla expert. Yesterday I have executed some simple steps to try and undo the hack The steps that I executed: - backed up all files except for the media directory - fix file and folder permissions (did a recursive for all files and folders to 755, then on some important php files 644) - change control panel password (this login works fine) - change Joomla admin password through phpMyAdmin (used MD5 hash off course, but the login still does not work) - replace [login to view URL] by a fresh copy of Joomla 1.5.26 - fixed /components/com_user/models/[login to view URL] by adding the following code after global $mainframe; on line 113 of [login to view URL] if(strlen($token) != 32) { $this->setError(JText::_('INVALID_TOKEN')); return false; } ## Assignment ## This is my request for the freelancer: - check log to confirm that site is no longer hacked - fix admin login When you apply for this project, please indicate the steps / strategy that you propose to follow. That way I can see if you understand the problem and are qualified to solve it. Please only apply if you are ready to start today. Cheers, Frank