old wordpress (2.0.2) posts hacked - is user 'WordPress' in table from hack?

[nico-t]

Got a couple blogs running on WP 2.0.2, never updated them didnt do much about them. Theyve been hacked and now i get post spam: new posts created with spam in them. They are posted under my user account 'admin' so i am looking in the db and i see another user account too named 'WordPress'. Ive checked some other WP db's and some also have the 'WordPress' user and some don't. I think i never seen this user account (they are also not visible in the WP admin panel) but then again i never look at the db. So is this normal to be here? Im looking at what i have to delete. It looks like this user only appears in my old WP 2.0.2 blogs.

[sex69]

update your blogs regularly

[Si]

Clue is in the title,

Make sure you update your blogs man. even 2.7 has holes in it, hence the regular updates.

[nico-t]

can i just update this version and will the hack be gone? I will also change my passwords on the blogs. I dont want to have too much work on this.

[TheDoc]

can i just update this version and will the hack be gone? I will also change my passwords on the blogs. I dont want to have too much work on this.

Yes, that is a hack..

Upgrading should remove the hack, but you will need to remove the trash user by hand. And you may have to manually cleanup any posts or injected crap into posts.

[nico-t]

Yes, that is a hack..

Upgrading should remove the hack, but you will need to remove the trash user by hand. And you may have to manually cleanup any posts or injected crap into posts.

yep that's what i figured. Thx

[fris]

wordpress sucks

[SpyCam]

+1 that, heh

[Fat Panda]

wordpress is golden ticket