Site hacked! Found "base64" in 2 files

[jwzumwalt]

Have you tested this from different computers?

I agree with Carlos, this is usually a malicious browser addon/plugin attack from a client computer.

Also, I ALWAYS remove any logo or anything that lets a attacker know what software your using. So for example I recommend removing anything that says you are using GetSimple or other software. If a vulnerability is found for the software, advertising it increases your odds of a successful attack.

If you use ftp (like I do) make sure you use encryption. I used a web hosting company that was constantly hacked for 3years until they started requiring everyone to use it. Once everyone used encryption no more hacks!