Magic Hack Wordpress Blog hacked

All in all, we can´t understand why insane people spreading viruses and
worms around the internet and why they hack websites.
In our opinion, this people should go to see a doctor at a mental hospital,
they seem to be very sick !

For us it was a 18 hour run to clear the problem
and for sure much, much fun.
To help other people which have the same problem,
we publish a short tutorial, how to get rid of the “Magic Hack”

The Magic Hack sems to use a backdoor in elder WordPress versions,
Thai-Eyes used a 2.3 version.
*First have a look at the editor of Your plugins.
If You??ll find a weird code, mostly in the bottom, with a lot of numbers and letters,
Your blog is infected.
What to do ???
* Go via FTP to Your server
and delete the malicious code in the vars.php (wp-includes).
* Check all Your plugins and delete the malicious code.
*Now You should be able to save Your work,
but don´t leave it like that !!!
The burglar could come back through the backdoor,
You need to close it.
*Change Your WP Login Password !
*Deactivate all plugins
*Update to the newest version of wordpress
*Update all Your plugins and check them before activation.

Now Your wordpress blog should be safe for a while.
Update to the newest version regularly !