Post #3929649

@dvk@toot.re Check the cron table for suspicious stuff (self healing malware). Check post_meta and options for script tags and similar.