Site hacked! Found "base64" in 2 files

[shawn_a]

Yeah this is usually a script that inserts into everything. Since ga does not do password throttling its wise to pick a very secure password as it can be brite forced for months. You might also want to check about adding noexec to your uploads htaccess