Mate, make a dump (export) of your Wordpress posts, backup all graphics files etc that you uploaded. Switch to a host that offers decent security; some shared hosts lock out (other) users while still allowing the webserver daemon access to files (but this still won't guarantee you not getting hacked). This is a must. Any shared host allowing access to other users files... not good, shall we say. Ensure no directories are set to 777, if you can't check it yourself then ask your host to. Next install base Wordpress (nothing additional at all). Install WP Security Scanner, Bullet Proof and I think there's even a Wordpress firewall and AV plugins on Wordpress * ORG. Don't bother with the old theme (it might be your weak link). Install a new one that's popular and has no negative reports about security (on the right of the theme page will be the latest forum entries, browse them and also do a G search to be sure). Then start importing your posts. If any of this is beyond you, see if your host can help for a fee, or source a reliable third party.