AVG Threat

I went to your site. It's been compromised. I'm not enough of an expert to tell you how, but there's header data on your page that is pouring out Viagra and Levitra ad content.

If you've got a good Web host, they might be able to help you clean that up. I'd start by contacting them.

Change all your passwords ASAP. That an enormous undertaking, but clearly someone has access to your site. And if they have that, they have access (potentially) to anywhere else you use that password.

You've been hacked by an injection attack.

Your host ought to be able to help you.

Be aware that numerous pages have malicious code injected into them; these will have to be cleaned by hand or restored from a known safe backup.

Also be aware that quite often the injection takes place because a user with login access has an infected PC; so you'll need to check your computers carefully for malware.

Quite often with WordPress sites the injection takes advantage of an insecure template or plugin.

Often a theme or plug in includes "upload" functionality in the form of a file or library that's installed in the theme or plugin directory (you need to use FTP or a file manager to search for these).

Names of known upload libraries include "class.upload.php", "HTTP_Upload", "SWFUpload", "Uploadify" and "jQuery-file-upload".

... definitely follow the above advice.

With AVG in general would just ad that it may not be the best protection. We have that at work and it does not pick up the same threats that Norton does.* Maybe that is b/c Norton overdoes it. Maybe, b/c AVG under-does it. Not sure? Something to consider in any event. One or both may not be foolproof.

e.g. mrexcel.com raises a red flag for Norton. Not so with AVG.