Hello Friends,
I am using Magento 1.8.0.1 over http and my domain is hacked twice; on first time hackers uses Media and JS to install a Module for additional login.html then I have cleared all offending contents from the server and changed the admin passwords too but again my domain got hacked