Thank you. I was asked to repair a site infected with Haxorsistz and this thread was instrumental in me being successful.
The site actually had multiple infections, including 2 instances of infected data in table wp_options as suggested by wpfixes. There were 5 modified/new files: functions.php and 404.php in the theme folder of the theme being used, a new file called gay.php in the wp-admin folder, a new file called selli.php in the root and a modifed index.php file in the root.
I have changed passwords and done all the other more general suggestions too. Thanks again!
