server been hacked twice

today i logged on my xfire and saw that the server name was armax3 something;then i logged in to the cpanel and changed it to the previous name gaB*etpro.then i saw that the jaymod server 's name was changed,i changed that as well.Then i saw that the etpro server was stopped and wasnt working.i went in to the cpanel to check what was wrong and i saw that the whole of the cfg was deleted.Now i know that there is someone who knows the cpanel pass so boooo or imagine,plz change ur cpanel passes as soon as possible or it can go even worse.Thank you