Gmount

Thanks for that James… I don’t know how but somehow I managed to get back in!

Thanks for sticking with it lorro!

Even though I have, several times, already done this, it looks like deleting and re-installing the theme has cured the problem.

I originally uploaded the theme using WordPress uploader (then I had the error message) so I deleted and re-uploaded using FTP… the problem was still there, I then deleted and re-uploaded using Cpanel file manager, this seems to have been the answer.

I never knew that you could upload files this way, it’s a heck of a lot faster than FTP, I came across it accidentally yesterday whilst going through some tutorial videos.

Getting back to my hacking problem… I’ve done everything recommended above, and deleted and re-installed two of my domains, but if the hackers have gotten into my domains as a whole batch of domains, even though I’ve changed Cpanel passwords etc. I’ve only cleaned 2 domains, but the hackers must still have access to the domains that I haven’t yet deleted and re-installed so what’s to stop them re-gaining access to the 2 clean domains in the mean time while I’m still trying to work my way through the infected domains?

I’m finding it difficult understanding the process!!!

Once again, thanks for all the help.

Following the instructions given here I deleted one of my sites, deleted the data bases and FTP accounts in Cpanel, changed the Cpanel password (which covers all domains in Hostgator) I then re-installed WordPress using the quick install… I then installed the security plugin recommended by “lorro” and uploaded other plugins and a theme.

During the process of uploading the plugins, I suddenly get some text at the top of my admin area which says:

Warning: include_once(/home2/gmount/public_html/review606.com/wp-content/wp-load.php): failed to open stream: No such file or directory in /home2/gmount/public_html/review606.com/wp-content/themes/PBTheme-gmount-Digitally-Signed/pbtheme/functions.php on line 47
Warning: include_once(): Failed opening ‘/home2/gmount/public_html/review606.com/wp-content/wp-load.php’ for inclusion (include_path=’.:/opt/php54/lib/php’) in /home2/gmount/public_html/review606.com/wp-content/themes/PBTheme-gmount-Digitally-Signed/pbtheme/functions.php on line 47

and when I view the site in a browser, this text is also there at the top of the page!

The strange thing is, when I first entered this support ticket here, I uploaded “Wordfence” to my best site that I wanted to save, and whilst working in admin on that site, I received a similar error message, and everything I tried to do in admin, resulted in that error coming up!

Anyone have any ideas on this…. it’s driving me mad!!!

Thanks for your help everyone, I will now try and put your advice into practise!

Thanks songdogtech,
the passwords in Cpanel and Hostgator that you refer to… are these the individual passwords for each domain thaat I will be deleting?
and having deleted all the files above, do I then need to un-install WordPress from that domain name and then re- install WordPress?

Sorry if these are dumb questions but this stuff really baffles me!

After I’ve done all this, do I need to let Google know, and if so, how would I do that?

For the couple of sites that I don’t want to lose… could I take screen shots of all pages, then delete the fies as you show above, then re- build the site using the same content? Or will this now be bad content in Googles eyes?
Thanks again.
Regards, Gary.

Thanks for your input,
I just tried the sitecheck you recommended and every one of my websites that I have hosted with Hostgator came back with the result “Warning: Malicious Code Detected on This Website!”

Assuming that this is accurate, how would I go about deleting the sites and starting them from scratch (I don’t have the finances nor the knowledge to start trying to clean up the sites) and if I do delete the sites, will this remove the problems totally?

Also will my Cpanel be infected in any way?

Regards, Gary.

Finally managed it!
By the way… the login details for FTP were nothing like what was shown in the Filezilla tutorial that WPRanger posted the link to!

I’m not complaining, far from it!
Just thought I should mention it for future reference.
Thanks for your help and advice!

Regards, Gary.

Thanks for that…. in the mean time I’ve been looking at my FTP programme “Filezilla” and it’s asking for “host, “username” password” and “port” where would I get this information?

Sorry I forgot to close the post!

Thanks for getting back to me Mike!
Yes I worked it out myself today…. by removing the caption from the image it seemed to cure the problem.
Not sure if this will detract from the SEO side of things.
I would have thought that there should be another way to deal with this but it seems not.

I did try to find the code that you referred to but the style CSS sheet in my wordpress backend for this site is blank!

Once again thanks for your help.

Regards, Gary.

Looked everywhere in WordPress and can’t find anything that resembles:

.wp-caption {
background: none repeat scroll 0 0 hsl(0, 0%, 97%);
border: 1px solid hsl(0, 0%, 90%);
padding: 4px 0 5px;
text-align: center;
}

Thanks Mike… but do I do this in WordPress HTML or in Photo Shop?

I’m not very good at this tech. stuff!
Do I replace what’s in the brackets, eg:(0,0%,97%)
with (#ffffff) or am I getting this wrong?

Sorry for the delay…. here’s the link
https://onlineretailcoupons.net/phen375/

Not using any image compressing plugin.

Regards, Gary.

Reply from Hostgator is that they are carrying out work that will affect me…. so that seems to be sorted.

Once again, thanks to all who helped on this!

Regards, Gary.

Hello alchymyth, I pasted the code in my other website and it cured the problem there!
I since received a support reply from Josee,she said that she’d set up a test page in my website and it worked OK, and that I must have copied and pasted my page (that was not showing correctly) from another website! (I built the page myself) she also said that my server is very slow today!

As I was doing the alterations that you suggested I noticed that everything was going slowly! and when I finished putting the code in my other website I tried to view other pages on my sites but got the message “site is timing out” “taking too long to respond” so I checked my other sites and they get the same message.
I then tried other websites (not mine) but they are all loading fine!
So I tried to click on a link to the support ticket from Josee and none of her links are working!!! the message there is “server not found” normally I have no problem connecting to her support!

I opened a ticket with Hostgator to ask if there was any reason for this but as yet have had no reply.

Could it be possible that the problem comes from Josee’s end?
This seems to be developing into a bit of a marathon! but thanks for your help and patience!

Regards, Gary.