Hacked WP site…

Sorry you were hacked.You need to notify your host and start working thru this, Have you gone through all the usual recommended resources:
https://codex.www.ads-software.com/FAQ_My_site_was_hacked
https://www.ads-software.com/support/topic/268083#post-1065779
https://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
https://ottopress.com/2009/hacked-wordpress-backdoors/

Additional Resources:

https://sitecheck.sucuri.net/scanner/
https://www.unmaskparasites.com/
https://blog.sucuri.net/2012/03/wordpress-understanding-its-true-vulnerability.html
https://codex.www.ads-software.com/Hardening_WordPress
https://www.studiopress.com/tips/wordpress-site-security.htm

Thanks for all that great info. I have spoken to my host and they are only able to offer a complete termination/reset of my account, so I guess that’s me back to square one. I have taken a backup of the (albeit hacked) site and dbs, but I guess trying to re-import any content from that into a fresh install is not a smart idea. Absolutely gutted that this has happened, even more so that I was so stupid as to rely on my host for a backup.

Your content is in the database. That most likely was not hacked.

Ok, thanks – that’s reassuring…

So, if I get my host to wipe everything and then reinstall latest v of WP, I should be able to recover the bones of my posts by importing the old db and making sure the images etc are available in the wp-content dir, or am I way off mark?

Apologies, I realise these are basic questions, probably explained in perfect detail elsewhere on this very forum.

Thanks again

So, if I get my host to wipe everything and then reinstall latest v of WP, I should be able to recover the bones of my posts by importing the old db and making sure the images etc are available in the wp-content dir, or am I way off mark?

That is how to do it but you need to change passwords immediately for wp, database, ftp and hosted account. Then as soon as wp is restored change passwords again.Do not forget your home computer. Make sure the images folder have no strange files or 1 byte images. Worst case the db is compromised but it may be ok.

You can also pay sites like sucuri to fix it for you. That is what I did.