[wp-hackers] My WPMU site got hacked!!!

[Brian Layman]

It looks like it is a simple defacement.  Deleting index.html will likely
temporarily fix the problem. However, that does nothing to plug the hole.
Your best bet is to delete all the files, reinstall the core WordPress files
and restore from last week's backup of the wp-content. And then uninstall
any plugins you don't HAVE to have and change the rights on  all of your
files to 744.

A hack can be fairly complex, but that's the basic procedure. A detailed
slide by Brad Williams about fixing hacks can be found here:
http://www.slideshare.net/williamsba/now-thats-what-i-call-wordpress-securit
y-2010 

Or contact Brad Williams, myself or the wp-pro mailing list if you just want
this fixed and want to move to a host that can prevent it from happening
again.

And don't worry, you're not alone in having this particular hack happen to
your site http://www.zone-h.org/archive/notifier=Xa7m3d Just make sure you
don't appear in the R column or get a gold star :)

______________________________________________
Brian Layman
eHermits, Inc.
TheCodeCave.com / eHermitsInc.com / twitter.com/BrianLayman /
facebook.com/eHermit