Also since you say your site has been attacked you should do a manual reinstall of all of your core files at minimum.
It is possible someone attacked your files in a way to look for a different wp-config.php file
Do a backup of everything now if you haven't yet
make a copy of that
put it in a zip file and don't touch it
use your first backup for restoration