Thanks for the responses, guys.
The Hack Repair Guy: All of them have the twentyten theme installed, but none have it active. All of them have akismet and Hello Dolly. They diverge from there as to what they’re using. Those are the only common things.
MickeyRoush: I’ve been doing a ton of research into the timthumb problem. Not all of the sites hacked had any form of timthumb anywhere (I searched via command line, grep’ing for the string inside files that identifies a timthumb script).
