To me that suggests the website has been hacked
No need to run combofix - but let me know tomorrow if there are any further problems
If not I will remove my tools