my blog is being attacked by some script

That sounds like a hack. Try:

– deactivating all plugins to see if this resolves the problem. If this works, re-activate the plugins one by one until you find the problematic plugin(s).

– switching to the Twenty Ten theme to rule out any theme-specific problems.

Some other useful links:
https://codex.www.ads-software.com/FAQ_My_site_was_hacked
https://www.ads-software.com/support/topic/268083#post-1065779
https://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
https://ottopress.com/2009/hacked-wordpress-backdoors/

yes it is theme hack .gng to read article sugstd by u, may find some sol. Thamk u

If you don’t mind can you share what version of wordpress you were running when you got hacked?
What is the code that is being inserted? Is it a <script src tag at the bottom of each post?
We were also getting hacks on wordpress 3.0.1, just upgraded to 3.0.2 but not sure yet if that resolves the issue.

my wp is v3.0

That’s now 2 versions behind the current version. The best protection against hacks is to always keep WordPress up to date.

ok just updated and problem gone

problem is back again

can you describe the hack in more detail, does the code get inserted inside all your posts? or do your wordpress files get infected? what does the hack code look like?

/*

• Best Virus Protection

*/
this is the code remove spaces and star

<ul><li><a href="https://protectionvirus.info">Best Virus Protection</a></li></ul>

can plugin co zthe problem i have 40+ plugins installed

could be a plugin, or after they hacked you they might have left behind a hack inside one of the plugin files. Check that you don’t have hacked entries in your wp_options table and that your plugins don’t have any hidden base64 or eval code snipets in them. usually that’s where the hacks are hidden.