Mirabellatest.com is the site, and so far everyone I have talked to can't seem to make sense of any of this. I'm running on 1.8 and the site got hacked a few days ago. We couldn't find a single file modified or uploaded. Through chrome developer tools I can find a index file that has the hacked overlay but can't find the file on the server. When we revert the site back to say 10 days ago when the site wasn't hacked it stills shows the site as hacked. Any ideas or suggestions are greatly appreciated. Thanks