I found some malicious uploads in incoming directory

make a list of the files you think are infected it will save time for whoever checks them.

also i think it would be a good idea to change the passwords to the ftp, they have been the same for a long time now, people all over the internet could have them.

it is just a suggestion.