He just can do that with a single click!This is what I do
1.check when they hacked it.
2.restore backup. If you don't have a backup ask hosting company
3.update website, plug-ins, theme. Install sequrity plugin
Done
May be 2 or 3 clicksHe just can do that with a single click!