-
>Will our rankings restore naturally?
Probably, with time (and assuming you clean it properly)
>What else should I do to fix this, SEO-wise?
It’s impossible to tell, nobody knows what you have. The only thing I can say for sure is: get someone who knows how to secure a website.
Additionally, if you have more websites on the same server, make sure the others weren’t attacked as well. Cross-site infection is one of the most common attacks.
