I upgraded to version 2.8.5 yesterday, and this morning when I went to the blog, all it said was "hacked sorry". Not good.
As it turns out, somehow the the "hacker" had changed the default theme and made it active. I was able to log back in and change the theme back to what it was before, but I'm concerned that there may be other files that were modified that I need to fix.
I don't have any idea how they got into the site; it's possible they had the username and password (I couldn't log into the admin site and had to reset it; but I'm not sure I was putting in the right password anyway).
Are there any documents around that would give me step by step instructions on creating a clean site and then restoring the database?