Been hacked

[debraguk]

So my site has recently been hacked and my host took it off line. It was a wordpress theme on the root directory everything but the theme can be deleted even though my hosts say they have given me access to the file/folder.

Wordpress isn't shown as being installed on Fantastico so I deleted all files via ftp but I was still unable to install via Fantastico so I installed again via FTP and renamed the directory that I couldn't delete. This install again isnt showing on Fantastico even though other manually installed programmes do.

The hacked index file is still there in the renamed directory, permission 755 but 'access denied' when I try to delete.

My ftp, cpanel passwords have been changed.

what is stopping the files being deleted?

 

[v2Media]

More than likely the file is owned by another account. Try chmodding the folder to 777, and the problematic file to 666. If those permissions take, you'll be able to delete them.

Do you have shell access from cPanel? If so, you can run a recursive chown chmod script to reset permissions.