One more hallmark of the attack is that the attackers will rename the primary wp-admin administrator account name to some thing like:For instance, if you figure out that the an infection occurred approximately fifteen days back, the subsequent command will provide you with other documents Which may be infected:The malware will chmod the data files