Site down because of iframe

https://codex.www.ads-software.com/FAQ_My_site_was_hacked
https://www.ads-software.com/support/topic/268083#post-1065779
https://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
https://ottopress.com/2009/hacked-wordpress-backdoors/

Did you ever get this fixed, because I continue to follow all of these suggestions, and none of them work.

Once you have removed the hack did you update to latest version and if you are on shared hosting there must be some security problem on server.

@govpatel are you speaking to the original poster or me.

For me, I’ve replaced the files clean several times and the problem keeps coming back. I’m on the latest version of WP.

Did you change you log in info on both wordpress and server

Not my wordpress admin. But my ftp and database accounts have been changed.

I get the impression it isn’t from my login. And more of a backdoor thing.

I’ve changed my admin password a lot in the past few weeks.

Great, I just tried to change it, and it locked me out of my admin. And because I have a safeguard for too many login attempts, I can’t get in for the next 20 minutes.

If you a have safeguard that locks one out then it has to be loophole on server or it could be on your computer scan your computer

Limit lockouts had to be removed because every time I reactivate it, it locks me out. Gives me a connection error.

(Too bad, it worked pretty well).

It seems my problem continues to morph. I’m not a security expert by any means, but I am not a noob either. This problem is the worst hack I’ve ever had to try to recover from.

I had to remove all my permalinks and make everything the default so it doesn’t redirect all of my links.

My computer is infected with malware. I’m continuing to run the scan to catch all of it.

I suppose I shouldn’t do a clean install of anything until I fix that.

Yes if your computer is infected it is finding a loophole when you log in.

I’m not sure if it’s that. The “malware” is something I have had on my computer for three years and it doesn’t appear to be modified. I don’t think it is that. I think it may be a false positive.

I’m still looking. Especially since I have replaced all my files from more than one location.

If it’s an infection in the database, I’m in trouble because I don’t know my way around that too well.

My solution is that i removed all the wordpress files and upload new files. but before that i re-installed my operating system and did full scan on my hard drives.

Some times if you log in from any other computer that is infected will cause the hack as well.