First - I've moved everything to a new host, upgraded to latest version and all login info is new.
Now for fixing the damage:
- hacker tattoed the top of my site and I haven't been able locate any place to delete it.
- I decided to use the opportunity to move site to new server and switch templates. Done.
When I imported the SQL db into new site the hacker's tattoo was there again AND on an unrecognizable template.
Question is what SQL db can be restored to new site without hacker's tattoo and maintaining the template I want to use now. I had a lot of posts I don't want to lose.
Finally, hacker info shows up in browser and at top of pages so it appears to be in the header.