Virus?

Hello and Happy New Year (I hope)!

I’m using AntiVirus for WordPress 0.9 by Sergej Müller and I received three alert e-mails last night with this message: “The daily antivirus scan of your blog suggests alarm.” My site appears to be working just fine so I’m not sure if this is a virus or just a false positive.

I performed a manual scan this morning before work and this is what I found (words highlighted as potential threats are in bold):

In my page_archive.php:

<?php include(TEMPLATEPATH.”/breadcrumb.php”);?>

In my functions.php:

include(TEMPLATEPATH.”/tools/enews.php”);
include(TEMPLATEPATH.”/tools/theme-options.php”);
require_once(ABSPATH.WPINC.’/rss.php’);

In my home.php:

<?php include(TEMPLATEPATH.”/tabber.php”);?>

In my links.php:

<?php include(TEMPLATEPATH.”/breadcrumb.php”);?>

In my page_full.php:

<?php include(TEMPLATEPATH.”/breadcrumb.php”);?>

In my timthumb.php:

… $cache_file_name = $cache_dir . ‘/’ . get_cache_file();

show_cache_file($cache_dir, $mime_type);
$mime_type = finfo_file($finfo, $file);

$mime_type = trim(@shell_exec(‘file -bi “‘ . $file . ‘”‘));

show_cache_file($cache_dir, $mime_type);

function show_cache_file($cache_dir) {

$cache_file = $cache_dir . ‘/’ . get_cache_file();

readfile($cache_file);
function get_cache_file() {

In my enews.php:

add_action(‘widgets_init’, create_function(”, “register_widget(‘eNews_Updates’);”)); …

Is this something I should be concerned about? If so, how do I clean the virus out?

Thanks for your help.

Mike