hi guys, i really need some expert input after all I have tried.
Last night, I noticed three wierd images in my sidebar nextgen gallery widget. i have never seen these images before, (they only showed when i was viewing my site in google chrome) i then checked a couple of my nextgen galleries and there were more in there. upon checking the next gen gallery in admin> galler>, everything appears fine. however, this morning, again everything seems fine.
i have now recieved a 'comment' on one of my articles from an email address ending in .ru, all it says is 'Hello. And Bye!', as a comment.
i have run exploit scanner and it points me to mainly plugin files, but even that isnt foolproof.
anyone kno a DEFINITIVE way of confirming if my site has been hacked?