Jeruvy wrote:

Additionally, why would your server every run wget in the first place?

WHM uses wget to receive its updates, same with yum. Or whatever update manager you use.
If you setup a different user it will break cPanel updates, so its better just to limit it to root.

My site was hit hard by the worm.. but between my webhost (Nexcess.net) and how great CPG is coded, I survived the attack unharmed.

Thanks to computercops, raven and this thread... I was able to code in my .htaccess a block from the attacks.

I was later informed by my host, that they were on top of it, and what I did was okay... but unneccessary because they had already taken the necessary precautions.