You'll need to wipe out the OS entirely and reinstall. So many things could have been altered.

Server compromised - How do I find out what is sending mail
I'm having some problems within the product description as my client wants to use the wysiwyg-editor and its image upload features.
Sadly all inserted image variables won't get parsed correctly so the output is something like this:

&lt;img src="{{media url="someurl"}}"&gt;


which is in fact the same as the raw input. 

Any suggestions how to fix this? I obviously don't want to change all image links to something hardcoded even if my client has just around 100 products ;)

(Magento 1.7.0.2)
