I've been playing around with google analytics today, and noticed I had an unread message. It appears my microphotography website had been suspected of being hacked, and it gave an example link to one of the dodgy pages:


Warning:potentially unsafe link, click at own risk
http://www.microphoto.co.uk/?qnw=96d6mz/

I'm guessing this has happened due to not updating the site in nearly a year and modules getting out of date etc. The thing is, I'm not entirely sure how to fix this. The page doesn't follow the usual drupal structure so I can't figure out what folder the page is in, and all the images are hotlinks to other sites so I can't easily find those files.

The only thing I can think to do is delete the entire site and databases, and make a redirect to a site that I actually do keep up to date. Any suggestions though are welcome, as that site does get probably the most traffic of all my websites!

I would write off that version and reinstall it for sure, or redirect it as you said before. Once hacked you can't really recover without a backup.