eldoradoseo

What I have used and seems to work somewhat painlessly is this.

1: Backup infected site mysql db and complete site.
2: Make list of all plugins themes.
3: Delete all files.
4: Clean up php files in theme by removing malware in beginning of each file.
5: Reinstall WordPress.
6: Edit config file to point to original db.
7: Install Wordfence plugin to protect against malware.
8: Install theme.
9: Install other plugins.

This was my site. It was completely toasted. So far it seems secure.

There are still some issues to fix but 90% of the site is good and that is huge. 🙂 I learned a valuable lesson. I had been backing up weekly but allowing my backup software to overwrite my file each week to save space. Big no no. My last backup was infected because I didn’t realize I had been hacked until after the last backup.

I have the same issue. It happened last Thursday and has really got me down. My backups are infected as well.

Sucuri doesn’t find it in the scan and I find no references to it online.