One Style is infected, the other isn't

[natecoupons]

I am at a loss. I can't find the malicious frame/code anywhere, it probably is encoded. After discovering that it is only infecting one of the styles I've turned that style off, (which is my main style)

Any advice as to where to look or what to do? It appears that this code/frame is on every page including the cmps hompage. I've searched in templates and the forwarding url is not there.

Thoughts?

--------------- Added [DATE]1271795762[/DATE] at [TIME]1271795762[/TIME] ---------------

I finally found the issue. The hacker inserted a line of code into the header