Search for every place where you're pulling in external content via javascript, iframe, etc. Something that you're pulling content from has been hacked or had malicious content injected.

http://sucuri.net is a good one :) (by fellow HN members)