le flaneur

Dear both – after playing around with de-activating plugins and trying a default theme without any success discovered that for some reason the folder permissions for the most recent uploads were set to 764 rather than 775. After changing them everything seems to be working ok now. Thanks for responding so quickly

Hamish – and happy holiday season to you both

thanks to you both for your help – I also followed up with my service provider who directed me to the following script to clean up what appears to be a fairly common recent hack
https://blog.sucuri.net/2010/05/simple-cleanup-solution-for-the-latest-wordpress-hack.html
This seems to have removed everything and the javascript links are gone.

Thanks for this – this sounds like the problem. I have removed all the encrypted code, without any problems apart from one plugin, which is a pain.

Is there an easy way to locate any hidden code in the theme that may be generating this code?

Thanks for your help – at least now I know what’s happening