Hi all, just a quick note to mention that yes, the server did get hacked. The 'rogue process' was probably the server admins doing a panic delete of files modified in the first attack. From what we've seen in forums, we're just one of many sites that were compromised.
So anyway, if you spot any remaining spammed pages, please let me know. -h