robin,
not to jump on a band wagon here, but your post says "my site was hacked" which would lead those of us on here with "dolphin sites" would presume you were referring to your "dolphin site" since you posted that on the boonex/dolphin blog. by any chance was this attended to by your hosting provider? the server needs to be scanned, as it is my belief that if this was done, and you cant find any shell files on your portion of the shared server, then the hosting provider see more needs to scan and clean the server, its still vulnerable if the server has not been cleaned.

so maybe your post should have been my hosting account was hacked, oh well just my thoughts.

later,
DosDawg