In using the wordpress editor, how can I delete the coding as described above?
Depending on what file the coding resides in, you may not be able to access and/or edit it in the wordpress editor. It’s probably pretty safe to say that a hacker will purposely place the code in files that aren’t accessible through the editor.
Get a FTP client application, log on to your server, download your entire WP installation folder. Then do a search for the offending code or signs of it. In some cases you will be able to do do a grep or grep-like search through your entire folder structure for “known” malicious code and flag the files that contain them. In other cases you will painfully need to manually inspect your directories and files.
The brute force method of replacing all files from a clean WP install is good for the bulk of the core files, but in some cases (wp-config.php, wp-contents/themes, actual content you’ve added etc.) you will need to sift through to figure out what belongs and what doesn’t. The hardest thing for me was plugins I’ve added (under the wp-content directory) because being unfamiliar with how file names and contents are supposed to look, it is difficult to determine what to flag as ‘malicious.’
Good luck, Google a lot, and be patient. I’m almost thru with my cleanup, and I still wonder whether I’ve caught everything.
