Hi,
can you explain me who did you detected the modfiled files that uploaded? who did you detected the rootkit? do you have some kind of a checksum software?