hi guys,
got the same problem on my server and the same answer from the host.
Though i have pointed to them one of the site attacked is up-to-date.
all PHP sites were hacked, the simple html sites survived ok.
This host is also running cpanel.
Thanks for the info, as this is the only place where i found interesting information.
Yannick