Don“t know excactly how we were hacked, but probably because I used an old SME 5.6 ...
Anuway, I ended up using WinSCP via ssh to copy mail files to a workstation and then to the new server, which turned out to work fine, with the exeption of subfolders ...
Thanks!
Terje