How to know if I’ve been wormed?

I use this plugin and it helps monitor my install:

http://wordpress.org/extend/plugins/wordpress-file-monitor/

if you’ve already been hit or think you have been, check the modified dates on your files and look at those files.