engelmania

Tico, I had a similar attack and wrote about it here: https://www.ads-software.com/support/topic/145448?replies=5

Like you I think it was coming through wp-cache because it disappeared as soon as I erased the plugin directory. I also discovered that someone had hacked into my plogger photo gallery. Maybe they gained access through that. I’m going to try and reinstall wp-cache and see if the problems come back.

I discovered that the attack was coming through the WP-CACHE plugin. I am currently unable to login to the WP Admin on my blog – it says that my browser is blocking cookies, but it’s not.

Since I couldn’t disable the plugin, I deleted the WP-Cache plugin directory and the spam disappeared. I am still unable to delete the actual cache directory or access the admin areas. I let you know when I am. Do any of you know of a secure caching plugin? It did make the pages load faster.

I have a similar problem but it’s not in my theme or the root index.php. These spam links even show up on my admin screens! I got swamped with spam ads a few days ago, so I erased my 2.3 install and replaced it with 2.3.1. That got rid of roblem for a day but now it’s back again. Also my WP login and logout don’t work from the sidebar I have to go manually to the wp-admin directory. I don’t know if that’s connected with this problem or just an error from the upgrade to 2.3.1.

Oddly, the spam is repeated inside the WP-Admin dashboard under “Latest Activity” and “Welcome to WordPress” – the spam here will disappear if I disable Javascript, but the spam at the top does not.

Any ideas? You can see the issue here: https://www.engelmania.com

Using version 2.3, I had the same problem, but was finally able to fix it when I realized that it was a directory permissions problem.

For some reason my javascript directories where set as 644 and they need to be 755 (at least for me). After changing this, the problem still was not resolved, but at least the choice to use the Visual Editor now appeared in my profile. Then I installed the Tiny Style plugin and everything worked like it was supposed to. Hope that helps.