My site blog has been hacked too. I dont know how all my files are 644 and folders 755’d. The only thing I can clearly say is that my hosting is a shared account, and I have 5 total sites on that account so far, 2 of them completely empty and 3 of them with content where 1 of them is a wordpress blog. Of the 3 with content they all got hacked by some turkish person and his ip got tracked by my visitor tracker.
All of the index.php were changed to show his message, but it was easy to replace the 2 index.php for my content sites, I dont know how to do this for my blog though because trying to log into my wp-admin.php doesn’t seem to work.
Plus is there any thing I can do to block this guy from coming back.