That’s really nasty… that is why all my best sites are on VPS (virtual private servers). What happens to an account on the same server, doesn’t affect mine. They are all separated.
Good luck on the recovery! Be sure no other root kits are hidden somewhere…