URGENT - ( yes I have ) BEEN HACKED - NEED HELP

[Chen Zhen]

Remove files from public_html directory:

404javascript.js
404testpage4525d2fdc

.. the scan found those as malware. Also look for suspicious code that could have been edited into your index.php file although the upgrade package should have replaced it anew.
Did you contact the host regarding the issue?

[DevinL]

Turns out that code was in every single php file I had. I've gone though and manually edited it out of all php files, and things seem happy again.

That java script was coming from a redirect in a .htaccess file that was in the root directory. I thought I had checked it, but must have missed it somehow.

I think all is well again, and hopefully it will stay that way.