http://forum.ait-pro.com/forums/topic/read-me-first-free/
Before clicking the AutoMagic buttons in step 2, delete your IP address from being blocked. If you used BPS Custom Code to block your IP address then delete/modify your custom code and save your edits/changes before clicking the AutoMagic buttons.
Unable to login into your website:
1. Use FTP or your Web Host Control Panel File Manager and delete the .htaccess file in your website root folder and the .htaccess file in your wp-admin folder.
2. Log into your website, click the BPS AutoMagic Buttons and Activate all BulletProof Modes. Or if you are removing BPS do steps 3 and 4 under BPS removal steps.
Regarding your website being hacked see this forum topic: http://forum.ait-pro.com/forums/topic/wordpress-hacked-wordpress-hack-cleanup-wordpress-hack-repair/ You should assume the worst case scenario that your entire hosting account is compromised/hacked.