Hacked! Please help

Go through this and follow the instructions:
https://codex.www.ads-software.com/FAQ_My_site_was_hacked

Hi Krishana,

thanks for your reply but I have done that. I’m looking for a specific answer for somebody who may of had this happen to them before.

Please help.

Please work through the following:

https://www.ads-software.com/support/topic/268083#post-1065779
https://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
https://ottopress.com/2009/hacked-wordpress-backdoors/
https://codex.www.ads-software.com/Hardening_WordPress

And the scanning tools at
https://sitecheck.sucuri.net/scanner/
https://www.unmaskparasites.com/

@ drog1998

Someone has uploaded a shell script to your site. It could be anywhere. The links provided by Krishna are the usually points you should go through first. I believe the one at Otto’s blog discusses where the scripts could be uploaded to. You’ll need to check your uploads directory (default is wp-content/uploads/) and any cache directories, especially if any of your plugins or theme uses the timthumb script. But even if you find it, there could be other malicious files spread through out your site so that they can regain access even if you find the vulnerable entry way.

thanks for that. looks like i’ll have to back up, wipe the server and reinstall.