Are you sure that andre's FTP account got bruteforced hacked.?
I suspect that there was a security hole in one of the SMF plugins, or in the panel. So they got the access of the owner of the files, andre´s ftp account in this case.
Because bruteforce is useless and a very weak methode.. Also...