That $data and base64 is in plugin table: MODx Revolution XPDo Core Services
Now I finally managed remove that $data (over 500k character) thing and all spam links removed on my site.
Should i leave rest $data thing or delete also them?
Depends on whether they are part of MODX or not. Download fresh MODX and compare the files. Sorry I can't be much help now -- pinched nerve in my shoulder -- can only type with one hand.
Ok and thanks for your help. I will check those files.
