shyspinner - 6:01 pm on Jan 5, 2010 (gmt 0)

This entire debacle happened to me over Christmas.

I had to change my Cpanel/ftp passwords, find offending javascript on my home page that was inserted and also delete a couple folders that were uploaded via ftp to my root folder. These files were calling .php files and malware was on my site.

Did all that, but after I had to wipe and re-format the machine and start from scratch. I thankfully keep excellent backups of everything on an external drive.

Noticed the malware had used files from an old wordpress install that was left on server, so there is another place to investigate. Lock down your Cpanel, change passwords and look for iframe javascript injected into your html, etc. Luckily I only found one instance on my home page.

I'm hoping you won't have any long standing problems getting your computer clean, mine needed a clean anyway but I would have rather done it at my own time choosing instead over during a holiday, but I could not rid the files from my computer so I'm happy to have a clean install and updated all firewalls/anti-virus/spyware.
ETA: Machine became UN-BOOTABLE in any mode.

As of yet, I do not know the impact with my site and google, I am optimistic that it was caught quickly enough.