[Uberbots]

you posted the link without first checking if there was a virus downloader going on?

all i can suggest for changing it back is, well, changing it back. Update all the passwords to your server, make sure your passwords are secure, make sure your server version doesnt have any security leaks or backdoors, and finally check to see if the "hacker" left any IP traces and report them to their ISP.