Things are working for now, i found a very intresting and detailed hacking script on my server in my forums directory, possibly it was also loaded onto other websites/servers effected. I have passed it onto hostgator and hopefully they will be able to see how this php exploit works and manages to re-apear.