It happens, now first thing you need to do is restrict your site to be access only through your IP using .htaccess file.

take backup of .htaccess file and add this below code in .htaccess

credits :**[TBI Infotech](https://magento.stackexchange.com/users/6451/tbi-infotech)** for [this link](https://magento.stackexchange.com/questions/21349/how-to-restrict-specfic-ip-address-to-access-magento-site-in-htaccess-file-in-m)

    order deny,allow
    deny from all
    allow from 111.222.333.444

There are lot of resources available to remove [hacking code here](https://www.google.co.in/?gfe_rd=cr&ei=m8jfV5OlCcWL8QfltbigBA&gws_rd=ssl#q=magento+remove+hacking) , if that did't works for you, 

next thing is as you said you have backup , than revert to previous backup. than scan you site in [Magereport](https://www.magereport.com/) . there they will mention to install required security patches and changing **admin and magento connect url** . once you install security patches , than lot of 3 -party extensions feature may break down. you need to contact extension team to provide  updated extensions that supports security features.

or if you **don't have any 3-part modules** , if you did't done any **core files edit** [ also if you are struggling to install all security patches ]  , than upgrade to 1.9.2.4 version