Who the fuck are these indian bums? It was just a 1st teir network site that I hadn't updated WP for. It was running WP 3.31. Looks like they deleted the admin account on the wp site.
We will see what else they did.
There is an xslave db. Is that normal?