I found that the WA_CMS/WA_CMS.php file had hacked code in it, i uploaded a fresh copy of that file.
I also found the webassist/security_assist/helper_php.php and webassist/database_management/wa_appbuilder_php.php files had permissions set to 000, i uploaded fresh copies of those files to fix the problem.