I have my own domain, and use Wordpress 2.2. Recently I am getting a threat message when I go to my homepage saying that wp-stats.php is a virus threat, but for the life of me, unless someone hacked into where my domain is housed, there can't be a threat. I asked the company which houses my site if they perform a virus check, and they do and suggested that NOD32 is giving me a false positive. Has anyone experienced this using wordpress? How do I discern if my directory inside my host server is infected or if my site got hacked? dancertm.net is my site, there is nothing racey about it, or anything like that. Any help would be appreciated, in the 15 years on the net I've not experience anything like this. Thanks.