I mentioned here the other day that this blog was hacked and I thought I had resolved it – now I’m not so sure.
The hack is a tricky one because the spam it is displaying is only visible in Google Reader! (and not in any other RSS reader).
I have completely deleted all the WordPress files, including themes and plug-ins, and uploaded fresh copies of them. I have hardened the file permissions run scans and a few other recommended steps but when I log in to Google Reader I still see new spam posts. This is very disheartening.
I’m hoping that the situation is, in fact, resolved and that Google Reader simply hasn’t updated its cache. The hack also did a 302 re-direct on the feed, so perhaps Google needs to refresh its DNS, I’m not sure, nor am I sure hoow often they perform this.
So for now, I’m in a holding position. I won’t make any more changes and I’ll see if the spam continues.