lorrequer

Thanks for your response Christi. Unfortunately now I have an error trying to log in to wp-admin at all, so I am taking everything down and will start afresh.

I do have a question – I have a Full Backup of my website in a tar.gz file, and I also have MySql backs. I restored the Msql backups to the server. I have expanded the Full backup and have it in Filezilla.

So to start afresh, do I re-instal new copies of WP onto the server and then do a backup (it will be through FTP) or should I just FTP everything up and then update WP). I was running the latest copy of WP and my theme at the time I was hacked so my brain is thinking this through as I type – perhaps I should just FTP everything back to the server?

Alas I have to join the ranks of having been hacked this morning. So frustrating. I ran the sitecheck scan and I got back this message:
Web site defaced.
Details: https://sucuri.net/malware/entry/MW:DEFACED:01
<p align=”center”><b><font color=”red” face=”Tahoma”>HaCkEd BY Mr.m0r0 MoRoCcAn HaCkEr</font>
<font color=green>Mr.m0r0 WaS HeRe </h2></font>
and Malaware detected at https://www.404testpage4525d2fdc

I presume there is nothing I can do about this. My hosting server wants to take it all down and I can restore from backups.