In my case: I did spot some suspicious activity to that file in the first case of infection, but based on subsequent activity from the same IPs, it didn't appea

In my case: I did spot some suspicious activity to that file in the first case of infection, but based on subsequent activity from the same IPs, it didn't appear to be a successful attack. In the second case of infection, there is no suspicious activity on that file. (Just some crawlers.) But, this isn't quite the same infection as is being reported on Network Solutions, so I dunno what those logs look like. I don't have any clients on NetSol.