Revive Adserver Hacked; info

[2ge]

I was upgrading my old Revive Adserver and found out it was hacked. Classical idiotic stuff on prepend code in zones, but what is new is automatically creating Admin access. Here is info - even if I delete this user, is recreated:

user_id    contact_name    email_address    username    password    language    default_account_id    comments    active    sso_user_id    date_created    date_last_login    email_updated
1000    Revive Adserver Service    [email protected]    service    8cef76d7d9862db25d9244a4e2721634    en    1    NULL    1    NULL    NULL    NULL    NULL

for this reason various aspects of site doesnt work (reset password, login for some users etc).

I am going to clean install and if official developers want source code/db I will back it up for further study. I tried to find out where this user is created, in which php, but no avail.

I dont know when or which RA was hacked (version)