The virus I'm experiencing is the same as the description DaveBaldwin posted. I want to get my WP website restored. I not a techie. I did the easy download and install that WP offers. I'm using 2.9.2. I can FTP into my NS account. I've done the following but cant restore the stie:
- I can login to NS and view my phpMyAdmin for the database. I just can't find the siteURL. I read one post that says it's in wp-options. I've looked there and when I couldn't find it I looked through all the tables. Nothing called siteURL or site_URL.
- I read another post on the NS blog that say the script came in as a JSquery file in the Scripts folder. There are no files by that name in the Scripts folder.
- There's a comment from WP on the NS blog that permissions need to be set at 644 for the wp-config file. I checked and that's already set... so how did the virus get in? I've read elsewhere online that 640 is the correct permission.
The virus seems to have attacked my site later than other site. Everything was OK until Tuesday April 13. NS is saying all is fixed yet I can't get my website restored. HELP.