[chrishajer]

Do you have any database backups or filesystem backups, or even old copies, that you could compare to? Ipstenu is correct about changing passwords, since you can’t tell now what happened. Change the FTP password, SSH, database, .htaccess, SCP, control panel at the host, etc. Lots to change to be sure.