To me that suggests the website has been hacked

No need to run combofix - but let me know tomorrow if there are any further problems

If not I will remove my tools