Yeah, that seems to be the case. So, with a Firewall in place now that is constantly updated and notification if anything changes, it seems this is thwarted for now. SiteLock is doing a good job.

It is a custom site with Flash embedded in html. To me, it's all Voodoo. I'm a print person.

There is at least one hosting company, Firehost, that I believe works with SMB's, but there are few economical choices for small businesses under attack like this I guess.

Thanks all. It's sad that there is so much bad intent out there.