Small sites may not have been hit if you turned it off soon enough. Quick tips:
* Look through the menu_router table for suspicious looking entries.
* Look at users & user roles, anything new?
* Look for scripts and executibles in your public and private upload files directory.
If you really don't know drupal and it's a new project, start from scratch (New Database but you're code should be safe assuming your repo isn't stored on the same server and there's no write to repo access on server)
* Look through the menu_router table for suspicious looking entries. * Look at users & user roles, anything new? * Look for scripts and executibles in your public and private upload files directory.
If you really don't know drupal and it's a new project, start from scratch (New Database but you're code should be safe assuming your repo isn't stored on the same server and there's no write to repo access on server)