Possible new hack [ redacted ]

[daveburstein]

Got hacked about 90 minutes ago. Defaced hacked by [ redacted ]. Google search shows it is rapidly spreading but finds little information. Standard security scans don't have details.
Rapidly spread through 6 sites on same server, 3 joomla, 3 Wordpress.
Advice needed:
1- Blocks administrator with hack screen. To get to my security software, I need to get in. Any ideas how to bypass? All files are there in ftp, look right.
2- Other advice?

Puts in an index.php file beginning like this. When I delete it, still hacked. Am checking database for odd files.
<title>Hacked By: [ redacted ]</title>
<link href="http://fonts.googleapis.com/css?family= [ redacted ]>
<meta property='og:image:width ' content='500'>
<meta property='og:image:height' content='200'>
<!-- Meta Tag -->
<meta property="og:image" content="https:// [ redacted ]"/>
<meta name="keywords" content="Hacked By - [ redacted ]">
<meta name="description" content=" [ redacted ] ">
<script type="text/javascript">

[ redacted ]

}

[Webdongle]

viewtopic.php?f=714&t=946026
Wiping all the files applies to all the sites on your server