ya i figured as much but i did a fresh install and this problem still happens, i think it is 3.6 that is causing the problems. there is some security hole that has been exploited cause i have 4 different sites and all have the same problem after updating to 3.6.