How to diagnose a Hacked Moodle Site?