brandonzundel

I uninstalled, deleted, and then reinstalled, but it’s throwing a fatal error when I try to activate the reinstalled version.

Install and run WordFence and GOTMLS. Between the two of them, they should be able to find all of the malware on your site.

Make a full backup of your site with cPanel/FTP (your files and database)

Next, replace your WordPress core files with fresh copies. (don’t just upload new ones, completely delete the old files/folders, and replace them… make sure it’s the same version of WordPress you currently have)

Log in to your “new” WordPress and perform any available updates.

Install/run WordFence. (make sure it’s set to compare your theme and plugin files against the repository), and fix any issues it finds.

Install/run GOTMLS to find the remaining malware files.

Yep, an easy thing to build out.

If it’s all of their articles, you could remove author 1, and attribute all their content to author 2. That’d be the quickest way without messing with the database directly.

Looks fine in Chrome for me, so I’m guessing the old code is just cached.

That would be a pretty simple plugin to build (exactly how simple only depends on the exact features you want)

I’m certainly qualified to build it.

The quick fix would be to add this to the bottom of your theme’s CSS file:

article{
padding: 21px;
}

That particular hack is very easy to find… just look for it in the header files of your theme… it’ll be inserted right before the </head> tag.

This doesn’t look like a hacker issue… but a PHP issue.

Take a look at the notification.php file that’s referenced in the error, and make sure there are no spaces, or blank lines before the <?php that starts the file.