There’s been a recent mass infection and attack in WordPress self-hosted blogs affecting the TimThumb.php, l10n.js, and WordPress core files in the “/wp-includes/js” folder.
While checking my rounds on geekyfaust.info the Avast Internet Security flagged my site infected with malware.
The TimThumb.php is used to resize thumbnail image/s plugins and templates using these features are not spared from the vulnerability.
Re-upload, replace new core files in “wp-includes” inside your WordPress root folder.
Check your blog by downloading this text file, upload it in your site/s root folder and rename sucuri_wp_check.txt to sucuri_wp_check.php
It will look like this “http://geekyfaust.info/sucuri_wp_check.txt rename it to http://geekyfaust.info/sucuri_wp_check.php”
Or you can individually scan your blog/s with this site check scanner
A yet and simple tool will check for possible intrusions or web injections in your site/s.