Need Help Restoring After A g00ns Attack
Hello-We have a gamer client that has a clan site. Evidently, he was using an out-of-date phpNuke version. g00ns attacked it and set up a redirect so that it goes to their website.
Thinking to reset everything, I did a restore from backup (Cpanel). It restored everthing, but the site says g00ns.com on it and redirects after a second to the g00ns website. No matter how far back I go, it still has the redirect and deface. I may have to delete the domain and restore from scratch.

Where have they placed the code to redirect phpNuke?
-Lamar