Has your config file changed ..... if it has upload a new one with your database details etc and chmod it to 644....
if it was left at 666 that is how they got in... did it to me a year ago... upload a new index.php file as well then go from there...
let us know