<div>
Please read the following article:<br />
<br />
<a href="https://www.experts-exchange.com/Web_Development/Blogs/WordPress/A_10806-Recovering-From-and-Preventing-WordPress-Site-Hacks.html" rel="ugc">https://www.experts-exchange.com/Web_Development/Blogs/WordPress/A_10806-Recovering-From-and-Preventing-WordPress-Site-Hacks.html</a><br />
<br />
It's hard to tell you how to recover because we don't know where the exploit is. &nbsp;I would strongly urge you to start a Sucuri.net subscription and let them clean and harden the site and then follow the rest of the recommendations in the article to stay secure going forward.
</div>


Please read the following article:

https://www.experts-exchange.com/Web_Development/Blogs/WordPress/A_10806-Recovering-From-and-Preventing-WordPress-Site-Hacks.html [https://www.experts-exchange.com/Web_Development/Blogs/WordPress/A_10806-Recovering-From-and-Preventing-WordPress-Site-Hacks.html]

It's hard to tell you how to recover because we don't know where the exploit is.  I would strongly urge you to start a Sucuri.net subscription and let them clean and harden the site and then follow the rest of the recommendations in the article to stay secure going forward.

<div>
I hired someone to fix for me
</div>


<div>
<div class="content wysiwyg-content">
the website is <a href="http://www.fantasy4all.com/rmdemo" rel="ugc">www.fantasy4all.com/rmdemo</a>. Atth image shows the trojan name<br />
<a href="https://filedb.experts-exchange.com/incoming/2013/01_w03/628002/untitled.JPG" target="_blank" class="file-inline" title="Kaspersky snapshot (129 KB)"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512"><path d="M67.508 468.467c-58.005-58.013-58.016-151.92 0-209.943l225.011-225.04c44.643-44.645 117.279-44.645 161.92 0 44.743 44.749 44.753 117.186 0 161.944l-189.465 189.49c-31.41 31.413-82.518 31.412-113.926.001-31.479-31.482-31.49-82.453 0-113.944L311.51 110.491c4.687-4.687 12.286-4.687 16.972 0l16.967 16.971c4.685 4.686 4.685 12.283 0 16.969L184.983 304.917c-12.724 12.724-12.73 33.328 0 46.058 12.696 12.697 33.356 12.699 46.054-.001l189.465-189.489c25.987-25.989 25.994-68.06.001-94.056-25.931-25.934-68.119-25.932-94.049 0l-225.01 225.039c-39.249 39.252-39.258 102.795-.001 142.057 39.285 39.29 102.885 39.287 142.162-.028A739446.174 739446.174 0 0 1 439.497 238.49c4.686-4.687 12.282-4.684 16.969.004l16.967 16.971c4.685 4.686 4.689 12.279.004 16.965a755654.128 755654.128 0 0 0-195.881 195.996c-58.034 58.092-152.004 58.093-210.048.041z"/></svg>untitled.JPG</a>
</div>
</div>


untitled.JPG

the website is www.fantasy4all.com/rmdemo. Atth image shows the trojan name

How to clean this Trojan in my Word Press CMS?

WordPress is a free and open-source content management system (CMS) based on PHP and MySQL for creating websites and blogs. Features include a plugin architecture, a template system and strong management, customization and search systems; through its dynamic presentation of content, webmasters have the flexibility to create websites easily.

WordPress

Web development includes all aspects of presenting content on intranets and the Internet, including delivery development, protocols, languages and standards, server software, browser clients, databases and multimedia generation.

Web Development

A blog is a discussion or informational site consisting of discrete entries ("posts") typically displayed in reverse chronological order. Blogs can be the work of a single individual but more recently "multi-author blogs" (MABs) have developed, with posts written by large numbers of authors and professionally edited and "microblogging" systems help integrate blogs into societal newstreams.