vertolot

I can edit files directly on server, the point is I do not know what to edit. It seems that someone registered, loggedin, and then tried to sabotage the site.
I also can replace files, then which files need to be replaced?