Thank you, I think it is ok for now.

I found and removed the spammy links, and it passes http://www.avgthreatlabs.com/website-safety-reports/domain/t... and it came out clean after I removed those Viagara links in header.php.

I also upgraded to the newest version of wordpress and changed passwords. The hackers might have left a back door, so I will need to reinstall everything.