database hacked and unable to access admin

I have had a clients site hacked. Was set up in june 2011 so I’m not sure what version its running. The hacker defaced the Contact page and deleted all admin users from the database. I checked out and found hacker activity in the posts and deleted it. There is still a message from him on the contact page which I cant find the source of.

Problem is that I cannot access the admin area after setting up new admin in Mysql. says I dont have permission to access the page wp-admin.profile.php.

The site is http://www.kingfishercuriosityshop.com.au

I am not a great progammer and am at twits end??