Thanks to Google Alerts I received a notification of a new mention of the word “superjens” somewhere. It lead me to a site that appears to list hacked websites. I checked my site, all looked good, but a little more digging brought up a virus.html file in my www directory.

Neat!

Anyways, I changed all the passwords, removed the offending file, and then actually discovered a “virus” in one of the themes I was messing around with, Nova from here: http://www.elegantthemes.com/gallery/nova/

Now I can’t say for certain if the virus was there originally, or was planted by whoever broke into my site, but that entire theme has been removed as well. All is clean, as far as I can tell. I’ll have to dig into this some more, maybe I should rebuild the site from my last backup. Whatever, there’s nothing important on there.