Loaded Commerce Community

I have an unauthorized Top Administrator created in my creloaded shop!
I can see in the logs what actions he took:
A complete copy of the dbase was created and downloaded!
I do have the system log and the used IP.
How can this account have been created?
What can do to better protect the shop?
TIA
Hugo

please detail your version of :

what cre software (what patch) are you using?
MySQL version?
Server software?
host?
how many people have FTP keys?
how many people have admin keys?
have you hired any one sketchy to work on the site
where did the IP trace to ? (country)
do you know any one there?
is your configuration.php file permissions set properly?
did they access FTP?
do you store customer CC#?


dude... i hate to tell you this...but my experience is.... once the site goes to the dark side..... it doesnt come back. its a never ending cat and mouse game. (this is just my experience, i truly hope yours is dif)

id go download the latest patched stock possible...then migrate over your template and SOME of your database tables if your desperate for them.

once they have the keys, there are so many ways to reopen your site.

I too have been compromised ... more than once! This last time, "they" activated the "Credit Card CCV" module, which I don't use.

Main question is: How do "they" get access to my system and create a Top Admin account? Where is the hole? Where do I start looking? Their is only one person with the access to this site.

I have been breached by an IP address from Russia, Turkey and US. My current version is a heavily modified "White Label" version 1.0. I have not been able to apply any patches or updates because the person that we got this from said that there are too many modifications that it would take forever to update what we have.

We have purchased the latest version from CRE Loaded on June 19, 2010. We have now moved our attention to change over to this latest version and hope that things will clear up, but in the mean time if anyone with a suggestion on how stop these attacks will be greatly appreciated!

BB