Excellent, really useful, I’ll be using this for all my WP installs from now on.

After your last post on this subject, I was thinking that it would be a good idea for Automattic to create a plugin that carries out all the checks you suggested people do to find out if they’ve been hacked – obviously, the vast majority of people won’t know or won’t bother and, in the long run, that hurts the reputation of WP. A plugin that makes doing the right thing easier would, of course, lessen the damage.