1. For screen shots, use imgur.com and put a link to that image in a post/reply.
2. Get a fresh cup of coffee, take a deep breath and carefully follow this guide. When you’re done, you may want to implement some (if not all) of the recommended security measures.
If you’re unable to clean your site(s) successfully, there are reputable organizations that can clean your sites for you. Sucuri and Wordfence are a couple.
Here is the hack screenshot: https://imgur.com/a/LTuBabB
I can still get into cpanel. Here are all the folders that were modified recently (not by me; probably hacker?) : https://imgur.com/a/aBytuok
Does this give any clues?
I’m looking at the FAQ you sent and it says to “use iThemes Security plugin” — that isn’t very helpful considering I cannot even access the wp-login anymore. Can I get some more targeted advice please?
follow the procedures to physically remove all plugins, themes and core files, and replace them with clean versions. Check your .htaccess and wp-config.php files for lines that look like they don’t belong.
OK, will need to get a developer/security expert involved then. I’m just an ads guy, this is too much for me lol. Wordfence looks good — can you recommend any WP security experts based in Canada? would be preferred.
As noted in my link, I recommend using the security companies Sucuri or Wordfence. Both offer cleaning services.