My site's been clean since the day after I posted that note. The host, for a price, scanned and identified the issue, and I've updated all passwords, etc. And implemented a more robust back up strategy. These hackers should put their efforts into robbing banks, and not blogs that are people's hobby and sometimes part time income.