just noticed it doing a mysql backup.
(even though Host claim they notify clients first, it just never happens)
Which scripts? don't know off-hand (hundreds of pages) other than custom insert script (runs through third party includes file) is not inserting, etc. I've just seen it running incomplete.
If I could target what has been changed in php first, it might be easier to identify.