Wordpress site hacked. I need help removing the malicious data.

Hello,

I was notified by my hosting company that my Wordpress blog was hacked. It has been taken down and is password protected. I do not have a previous version of my Wordpress blog to restore from. My problem is my website needs to be cleaned up. I want to keep my blog posts and photo files and comments from over the years. I just don't know what to do. I am making a backup of my site now but wouldn't that contain the malicious data? Can someone help me remove the malicious data from my site so it can be restored?