http://www.ghacks.net/2010/05/09/mass-shared-host-website-hack/#comment-1073096 Reports began to appear on the Internet
two days ago that suggested that a new mass hack was underway. It was first assumed that the hack was only targeting Wordpress blogs but it soon became known that other scripts were also affected by it.
http://www.wpsecuritylock.com/breaking-news-wordpress-hacked-with-zettapetta-on-dreamhost/
resources to see if your site was hacked
http://codex.wordpress.org/FAQ_My_site_was_hacked
http://ocaoimh.ie/did-your-wordpress-site-get-hacked/
http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
http://www.snipe.net/2010/01/when-wordpress-gets-hacked/
And when you're done:
http://codex.wordpress.org/Hardening_WordPress
Google info, domain lookup:
Domain name: firesavez7.com
Registrant Contact:
UIS
Garritt Kooken
+86.592257788 fax: +86.592257788
Rue de Virton 237
Evegnee Evegnee 11111
in
DNS:
ns3.cnmsn.com
ns4.cnmsn.com
Created: 2010-05-07
Expires: 2011-05-07
Wordpress security site: http://www.wpsecuritylock.com/