Thanks for the comments Ana! People usually don’t understand how much work it takes to make the plugin or a theme. And, there are markets that sell plugins for next to nothing and that changes users perspective on the price the plugins or themes should have.

Alright. Thanks again for the article and your inputs.

There are some security plugins that can do that, but they are usually checking only if files are changed in some way, and the process is not 100% reliable.

Thanks for the quick response. I appreciate it.

Isn’t there an alternate way to scan all files on cpanel for “malicious code injector”? I have multiple blogs running on shared host.

How about the possibility of malicious code in database? If the db is hacked then how would I know which fields/tables need to be removed?

BTW I have created a ticket on hostgator support asking them to scan all the files and database for malicious code.

Thank you for sharing your experience. You need to remove whatever plugin (or theme) did this in the first place. Replace all WordPress files, check all themes for extra code and all plugins too, best to remove the and upload clean files. Remove users added by this malware. And, stop downloading pirated plugins, the price of the plugin is not worth getting your website destroyed.