Server Error 500

You need to rename your theme folder to old-theme_folder_name, deactivate all plugins, make sure a manual install is done right and verify the db was also not hacked.

Then:

You need to start working your way through these resources:
https://codex.www.ads-software.com/FAQ_My_site_was_hacked
https://www.ads-software.com/support/topic/268083#post-1065779
https://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
https://ottopress.com/2009/hacked-wordpress-backdoors/

Anything less will probably result in the hacker walking straight back into your site again.

Additional Resources:
Hardening WordPress
https://sitecheck.sucuri.net/scanner/
https://www.unmaskparasites.com/
https://blog.sucuri.net/2012/03/wordpress-understanding-its-true-vulnerability.html

Also, it looks liek your host may have disabled the site due to the issues:

https://www.yourlowmortgage.ca/

https://sitecheck.sucuri.net/results/www.yourlowmortgage.ca/ (re-scan required)

Thanks. I will give it a try. Do I leave the old theme folder intact or do I upload a new theme folder and delete the old one?

Brad

Sorry….1 last question. I have reloaded WordPress and now when I visit my site all I get is a blank white screen, but no server error. Does this sound like an issue with the database or the theme/wordpress installation?

I can access the login screen, but once I type my username, password and hit enter I get another server 500 error.

I was able to repair my site Sunday night after the hack and it was up and running again. I really didn’t get into trouble until I installed the latest WordPress. This leads me to believe the database is fine and there is something off with my wordpress installation.

Any thoughts?

Thanks

Brad

Please review my post…please also be specific on what you mean by “reloaded WordPress”.

What I asked is to force use of an unedited theme and deactivate all plugins (rename the plugins folder to old-plugins). These steps must be made.