I was actually interested in how deep it went, its one thing to figure it is obviously something bad, quite another to actually see just how bad it really is.
Are you running it where there are no other wallets it can upload somewhere, or where all other wallets are encrypted so you don't care if it sends them somewhere or what?
Or if not, have you noticed anything going missing from any other wallets yet?
Do you have wireshark or something running on your LAN so as to be able to notice if an invisible root-kit has been put in place?
(Or, rather, to notice when/if it eventually calls home?)
I am still curious whether it is "just" an instamine or a direct attack on your machine...
Did you get connections and blocks right from the start?
-MarkM-
LOOK AT COMMIT, YOU WILL SEE WHAT WAS MISSING. TRY BUILDING WITH FIX, IT WILL WORK NOW