Mark Ratledge

@micloset: Sorry, but you’re using a premium/paid theme not supported in these forums. It’s best to go to the support site where you bought the theme – http://themeforest.net/ – for help with customizations and issues. You paid for support when you bought the theme, so you should contact the people who sold you the theme.

These forums are for free themes available in the WordPress theme directory at http://wordpress.org/themes/. See http://codex.wordpress.org/Forum_Welcome#Commercial_Products

FYI, that site is very old, but that script still works. And this one works, too: http://suhastech.com/wordpress-wxr-xmlfile-splitter-for-mac-os-x/

I have had to create a new username and re-register to be able to come on this forum and ask for help.

FYI, any logins you created for your own WordPress sites have no relation at all to any logins to these forums. They are completely unrelated.

Try a manual update to bring your site back up; the update must have been interrupted and some files must not have completely uploaded. See Manual Update: http://codex.wordpress.org/Updating_WordPress#Manual_Update

Tell him to point name-servers to the host where you have gotten a new hosting account. See https://codex.wordpress.org/Hosting_WordPress That will give you a place to start a new site from scratch.

If he is willing to copy the current site to the new host, see Moving WordPress « WordPress Codex after you get a new hosting account.

We do not contact posters re: support; and do not post emails or contact info in these forums.

You can post specific questions here, but again, do not post malware. And these forums function in a Q&A format, not as a “I fixed it this way” forum; you need to do that on your own site.

If you have a concern about WordPress security, read https://wordpress.org/about/security/

Here’s what I found out, this hasn’t been reported yet…. Trying to understand the mechanics of the attack…

Sorry that you got hacked, but this is old news – many sites on the web get hacked, and many of them aren’t even WordPress. All sites on the web are under constant attack; just take a look your raw server access logs.

And if you’re trying to understand the exploit vectors, you need to look at the source – the server logs and the server security – and not simply the symptoms (the hacked files) which aren’t going to tell you much. Many hacks are completely different from one another, and your server and theme/plugin combination will be different than anyone else’s, so posting the details of your hack doesn’t really help anyone.

Carefully follow FAQ My site was hacked – WordPress Codex.

Then take a look at the recommended security measures in Hardening WordPress – WordPress Codex and Brute Force Attacks – WordPress Codex

You’re not going to be able to point the nameservers to a new host – which is what you need to do to start from scratch – if you don’t have access to the domain registration. http://www.whois.com/whois/texasautovalue.com shows the domain to be registered at Enom. Do you have login info for them? Or does the original developer own the domain Texasautovalue.com ?