Thank you! I have been reading through the docs on fixing hacked sites. Are all of the core WordPress php files left unchanged except for the wp-config file?
One of my issues is that I currently cannot access the login page because of the hack. It simply shows a few text symbols at the moment.
edit: I also remembered that the installed version of WP is not current. (I think it’s 3.3), will that also potentially cause issues when I replace with clean files?