[balinor]

Sorry, I had to remove your link - until you know for sure what the hack is, don't need everyone here getting a virus.

Check the timestamp on all of the templates - look at the ones that were recently edited. Also change your FTP and other passwords, and get your host to help you determine how they got in.