It seems the blog still is hacked. But I have now cleaned it up and there is no difference between it and the files downloaded directly from WordPress. Not what I can see anyway. And there is nothing in the database either. So I’ll just keep my eyes open for a solution on the Internet 🙁