mcfreder

@astra: Open your phpmyadmin. Tell me how many databases are you seeing? provide their names here. Now open up your ftp find: wp-config.php

send it to your computer > open it with a notepad > find this line: define(‘DB_NAME’, ‘whats-database_name_that_goes_here?’);

At this point go back to phpmyadmin and find other database name than the one you found on wp-config.php file.

select it and find wp_posts table and take screenshot and post it here.

does your theme have a panel where to edit css ? if so fetch there.

Hi,

I am check another scan here: https://sitecheck.sucuri.net/results/lehighvalleywomansjournal.com

I managed to locate your malware:

Please access your admin panel > go to Theme editor > footer.php

find this tag: <!–visitorTracker–>

and remove a script that look like this: https://labs.sucuri.net/db/malware/malware-entry-mwjsgen2?web.js.visitor_tracker.001

Click update. Let me know you have done that so I scan your site again.

No! That code is for images background not website background.

Please click header.php and find this code:

<style type="text/css">

        /* Typography */
        h1, h2, h3, h4, h5, h6 { font-family: "Oswald", Helvetica, Arial, sans-serif !important; text-transform: uppercase; }
        blockquote { font-family: "Oswald", Helvetica, Arial, sans-serif !important; }

        /* Typography > Forms */
        label { font-family: "Oswald", Helvetica, Arial, sans-serif !important; text-transform: uppercase; }
        button, a.button, .button a, #submit, #comment-submit, input[type="submit"], button[type="submit"] { font-family: "Oswald", Helvetica, Arial, sans-serif !important; text-transform: uppercase; }
        button:hover, a.button:hover, .button a:hover, #submit:hover, #comment-submit:hover, input[type="submit"]:hover, button[type="submit"]:hover { font-family: "Oswald", Helvetica, Arial, sans-serif !important; }

        /* Typography > Search */
        input.input-search[type="text"] { font-family: "Oswald", Helvetica, Arial, sans-serif !important; }

        /* Typography > Navigation */
        .navigation,
        .navigation-mobile,
        .navigation-categories { font-family: "Oswald", Helvetica, Arial, sans-serif !important; text-transform: uppercase; }

        /* Typography > Slideshow */
        .slide-caption h2 { font-family: "Oswald", Helvetica, Arial, sans-serif !important; text-transform: uppercase; }

        /* Typography > Widgets */
        .widget_recent_tweet .tweet_text, .widget_pages li a, .widget_subpages li a, .widget_nav_menu li a, .widget_archive li a, .widget_categories li a, .widget_archive li li a, .widget_categories li li a { font-family: "Oswald", Helvetica, Arial, sans-serif !important; text-transform: uppercase; }
        .wa-footer-full .widget_recent_tweet .tweet-text { font-family: "Oswald", Helvetica, Arial, sans-serif !important; text-transform: uppercase; }

        /* Typography > Pagination */
        .pagination { font-family: "Oswald", Helvetica, Arial, sans-serif !important; text-transform: uppercase; }

        /* Typography > Callouts */
        .grid-callout-home .post .post-title-container { font-family: "Oswald", Helvetica, Arial, sans-serif !important; text-transform: uppercase; }

        /* CSS Common > Selection */
        ::selection { background: #daff00; }
        ::-moz-selection { background: #daff00; }

        /* CSS Common > Links */
        a { color: #daff00; }
        a:hover { color: #daff00; }
        a.underline, .underline a { color: #daff00; border-color: #daff00; }
        a.underline:hover, .underline a:hover { color: #daff00; border-color: #daff00; }

        /* Body */
        body { color: #818384; background-color: #000000; }

look at the bottom of the code above. That’s the line you need to modify.

Oh! I can see clearly now. Please go to Phpmyadmin > find and select your database > find and click wp_options table > look for siteurl and home, make sure they are both pointing to https://www.scarlettjames.com

yes, check this guide: https://www.w3schools.com/css/css_background.asp

basically you will have to remove ‘background-color: #000000;’ and put new code as in the manual above.

GL

Please go to Phpmyadmin and find other database that has similar tables as in the new one you recently created. Usualy, tables starts with the prefix wp_

when you find it let me know.

Ataboy! Good for you! nothing is lost!

Hi,

Do not panic!

please run a malware scan at: https://quttera.com/

and post here the report link, then i will help you locate and remove the malware.

inside the uploads do you see other folders that contains images ?

Have you done any recent changes to the menu ? rename your theme folder and use twentyfifteen theme. see if you can login or preview your site.

Hi,

Please go to theme editor: then find header.php > look for this peace of code:

/* Body */
        body { color: #818384; background-color: #000000; }

this code: #000000 means that the background is black currently. I am assuming you have some html knowledge so you probably gonna figure it out.

Good Luck,

Hi,

Please go to: https://www.ads-software.com and download the latest version of wordpress

Extract and replace wp-includes and wp-admin folders in your ftp

Done.

OMG! You shouldn’t have done that! Very risky move! Now you have to pray not to have lost all website files, the database should be safe, but the files may be not.

Let’s check. Please open the website ftp and look for an additional /wp-content-Some-random-number/ folder

If you find it you are safe. Make a backup of it first and download it to your computer.

now go ahead to Phpmyadmin and find the older database of that website.

Re-do the procedure to change password.

Keep me updated if you manage to do these things .

Np! You can still access your security plugin and change the admin login to whatever name you like instead of wplogin for better security. However you can stick to that one.

Good Day,