Website Redirects but I did not allow it

I've setup a website using WordPress and just noticed th开发者_如何转开发at the homepage redirects to a different section of the website with random characters.

Like www.yourdomain.com redirects to www.yourdomain.com/XYiOEL which is a 404. It changes, sometimes it is there, sometimes it is not. I've checked my .htaccess (newbie here) and I don't see anything that could cause this.

Help?

See FAQ: My site was hacked « WordPress Codex and How to completely clean your hacked wordpress installation and How to find a backdoor in a hacked WordPress and Hardening WordPress « WordPress Codex and tell your host. Change all passswords. Scan your own PC. And see http://blog.sucuri.net/2011/08/timthumb-php-security-vulnerability-just-the-tip-of-the-iceberg.html