URGENT Site has been hacked and I can't log in

If your site is hacked, first thing I would do is contact your host and ask them to do a security sweep. They should be able to help you remove the hack. Post back if you need help restoring your access when they’re done.

Thanks, Cathy. The host is 100megs and unfortunately their support services are not accessible on weekends. I think I’ll be looking for a new host when this is resolved! I’ll have to wait until tomorrow morning to talk to them. I guess I can’t do anything about WP access until then?

I need more details to help better – which url are you going to that isn’t recognizing your email? What is the error message you’re getting?

Backup all the necessary datas and contact your hosting provider about the hack.

I am trying to log in to my admin page here:

https://janetlittle.com/wp-admin/

When I do this and try to enter my login information, I get an invalid username message. When I try to use the link to reset my password, I get a message that there is no user registered with my email address, and I know that is the ONLY email I used with WP. So it would appear someone has locked out my access to my own account.

Thanks, Richard. I don’t know how I can backup my data when I can’t even access my WP admin page. I’m sorry for my ignorance, but I really am a newbie when it comes to this stuff.

Ok, the site has been restored by my host (100megs) — they found a bit of malicious code in a theme that I don’t ever remember installing. My site is https://www.janetlittle.com But I still can’t login to my WP admin page. Can someone tell me how to restore access?

Please see the following resources:
https://codex.www.ads-software.com/FAQ_My_site_was_hacked
https://www.ads-software.com/support/topic/268083#post-1065779
https://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
https://ottopress.com/2009/hacked-wordpress-backdoors/

https://sitecheck.sucuri.net/scanner/

Thank you for posting those links, esmi, but I do have to confess I’m really very lost. I did not build the site myself — I had a web designer do it — so a lot of this language is Greek to me.

I can get as far as visiting the WordPress key generator, but then I’m lost when it comes to “overwriting the values in my wp-config.php file” — when I click on that link, there are no helpful step-by-step instructions on how to do that for the doofus like me. Do I need to get my web designer to step in and handle this? I really don’t want to have to do that.

Do I need to get my web designer to step in and handle this?

If you cannot carry out all of the recommended steps yourself, then I’m afraid you are going to have hire someone to carry out the work for you.

This happened to me too. I could fix it myself with very much trouble. But I found some interesting sites for website fixing and prevention:

https://www.securelive.net/rescue-article.html
https://sucuri.net/
https://www.siteautobackup.com/

May be helpful to someone.

While I’m waiting to see if my web designer can help with this, can someone at least tell me where I would find the wp-config.php file so I can get a new set of keys? Many thanks.

It is in the same folder that you installed WordPress into.

Ok, I found it. How would I edit that file to insert the new key values?

Thanks for helping and being patient with me. I really do like to figure this stuff out for myself, but I’m a photographer, not a coder, and someone else set this up for me, so I’m really in baby step mode.

How did you ever get to solve this problem??