That was me last week. Again. Admittedly it was a few years since one of my sites was last hacked. This time it was two.
It’s no fun.
Even less fun is the support you may not get from your host. Mine was no help. Needless to say I had already done what I could to remove the malicious code. Still, the care factor was marginally above zero.