Well, I can guarantee that I can differentiate the injected “bad” posts to the real posts, because the real ones don’t have words like dating, gambling and other spam words. So I can find all IDs(or at least 90%) of these posts.
I want to risk(but I’ll do a backup), but I need some advices how to doit from mysql or maybe some wordpress functionality.
Nevermind, after digging a hour… I found an external javascript script in my theme.
But I’m familiar with PHP
But I do have access to source code.
It’s complicated, I have to make the change myself.