You're better off getting the host company to wipe and re-install.
If you've had a serious attack, there's no way to guarantee undoing it all...
See the Security forum for more details.
If you really want to try and find out what happened, try using rkhunter & chkrootkit:
http://www.nabble.com/understanding-...-t3710753.html