Turns out this site was hacked. Same hack as http://petetasker.wordpress.com/2012/07/23/joomla-pharma-hack