I posted the post below two days ago and I still need help badly.
sofar everything I've tried does not fix the problem.
knowing that the files changed are the three wpinclude/default pages I went in and disabled the write mode for owner as well.
having done that now I cannot open any widgets and I can't open
I get this message:
Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (11)
what would happen if I reinstall WP 2.9.2 in the tool/upgrade section?
will that delete all of my sites content?
I also found one directory in my root directory of one of the sites named .xmlnuad and this directory was in none of my other 70 sites. I deleted it.
anyway, please can somebody help me?
I am at a loss.
BTW my email is michaelgs at satx.rr.com
I have a group of 7 sites, all have the same problem.
about every 30 hours my sites go blank.
to fix this temporarily I reinstall the three wpinclude/default-xxx files via ftp.
I changed chmode to 644 read only.
but 30 hours approximate, when I look at my sites they are all blank again.
The first time this happened after I installed the JR Favicon for WordPress plug-in. Since then I have uninstalled the plugin.
Does anyone know what I should do to stop my sites from being hijacked?