I've been hosting a handful of WordPress sites for friends for years. I thought my setup on a shared host was secure enough, until some of them got this Japanese keyword hack. It's a major pain to follow these directions to clean a site out. Enough of a pain that I've been rewriting the sites with another CMS / site builder, with hosting that I don't have to manage.