Robert_Charlton - 7:20 pm on Jul 10, 2013 (gmt 0) [edited by: Robert_Charlton at 7:35 pm (utc) on Jul 10, 2013]
The question of what they are linking to is potentially important. Conceivably, if they've added something like pharma pages, the pages are cloaked and you will need to view as Googlebot to see them.
If you're hacked, you should of course get rid of the target pages. I would certainly also disavow after removing the pages, and I'd send Google a reconsideration request, whether or not I'd received a notice, just as a matter of course to get it on the "record". I wouldn't necessarily expect any change, but I'd want Google to note that these weren't my pages.
If the site is clean (ie, no hacked pages), try some of the urls to make sure you are getting 404s.
[edited by: Robert_Charlton at 7:35 pm (utc) on Jul 10, 2013]