[J____]

My blog got hacked a little while ago and there's something injecting malicious scripts and links to sites selling pills...

I changed password, user, permissions, etc but it keeps coming back. Does anyone know how to rid the virus for good? thanks!

[ForbiddenX]

I'm not 100% sure but try looking at the source code of each page of the site. There could be something left over that's doing it.

[J____]

i did a scan and this shows up

http://www.jacksonzhao.com/images/Other/code.jpg

it just a scanner but how do i remove that stuff?

[Preemo]

Oh dude, that is balls for you.

Usually you will get this type of attack through plugins and themes. The script could be embedded down to the database level.

How you get rid of them is fairly tough. You're going to have to restore from a backup and secure your blog more thoroughly. Which means changing the directory of wp-config. You can search Google for all the security tips. Other then that, without actually wasting an entire day scouring for malicious code, that was the best method I found.