I hope someone on here can help because the host will not assist me as Wordpress is 3rd party. Network Solutions is on my you-know-what list now :-(
They tell me it is the contact form that we had on there and I didn't have captcha on it. Lesson learned in a bad way. I used Contact Form 7 (which is great by the way!)
I am just hoping someone can guide me as to what files to delete via FTP since I can not access the site via wordpress right now.