Hello, we believe a client's cart has been hacked, he is generating emails from such files as stripewebhook.php, ppconfirm.php and wpconfirm.php. Is there a way to move the vsadmin folder to another location that the hacker cannot find, or what do we do? Latest version cart running.