My site hacked: suspicious additions to .htaccess file

[yojoe]

shawn: filezilla never had a way to encrypt stored passwords, thus I always advised against using it.
I suggest using unreal commander (with a free licence) as it allows to encrypt with main pass or with systemID and main pass. There's also "freecommander" but I haven't tested its FTP capabilities.

btw. infections through FTP happens pretty often.
At least browsers and search engines warn visitors when they enter an infected website.