Re: I’ve got a worm.
Ok.
So far, my desktop is clean…no viruses. My passwords are changed.
I’ve installed all new MU files and tried to run the Exploit Scanner, but getting an “out of memory” error…likely from the worm using up my memory.
From what I can tell so far, the infection seems limited to the functions.php files of my themes. But, of course, it could be disguised as anything deep in my database somewhere.
The challenge i have is that I can’t delete the code fast enough…By the time I’m on the 11th theme, the first 10 are infected again.
I do have an idea…if I clean up the functions.php file, then make that file unwritable, I would be able to remove the code from all 300 of my themes.
Then, i could make a few of them writable again and see if it comes back?
I guess I’m just optimistic that this is the only malicious code…
