WordPress Hacked What next?

I ran the wordpress hack plugin and it advised me that my wordpress install had been compromised.

I have been having trouble with performance for a while, especially within the admin panel for about a month. This seems to be most prevalent when I have my plugins enabled. When I disable them things speed up substantially. All-In-One SEO seems to be a prime culprit, not sure if there is a memory leak with this plugin or what?…

What would be the best recommended steps for cleaning this out?

I was considering a clean install of wordpress outside of the auto-updater. Delete all the old spammy comments, instead of just marking them as spam. And then re-starting. I have the following plugins:

all in one seo
xml sitemaps
flickr widget
facebook connect
twitter widget
tagally
secure wordpress
recaptcha
redirect

Thanks for any suggestions.