syntax error

Can you connect by ftp to your site and look for the index.php (at the same level as the wp-content folder) copy & paste the content of that file into a pastebin & post a link to your pastebin.

Unfortunately if you run the extra stuff at the end of the file though an unescape utility (such as http://www.linkedresources.com/tools/unescaper_v0.2b1.html) you will see that your site has been hacked and the failed attempt by the hacker to display their stuff in an iframe has resulted in the site getting munged.

You need to clean up your site. Start by replacing the files with clean copies. If you have recent backups this will be much easier.

You should find these resources helpful:

http://codex.wordpress.org/FAQ_My_site_was_hacked
http://wordpress.org/support/topic/268083#post-1065779
http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/
http://ottopress.com/2009/hacked-wordpress-backdoors/

Additional Resources:
http://sitecheck.sucuri.net/scanner/
http://www.unmaskparasites.com/
http://blog.sucuri.net/2012/03/wordpress-understanding-its-true-vulnerability.html

Hardening WordPress
http://www.studiopress.com/tips/wordpress-site-security.htm

2) Could I just pull the scripts out of the index files? I’ll delete his admin access and change the PW’s within about 20 minutes.

Nope. You need to close the door the attacker entered in via. Just deleting that code sets you up for a long game of whack-a-mole.

Those links cubecolour put there are a good read to solve this.

3) What resources would you recommend to use in the real world to find the hacker?

None at all! If you feel strongly about it then consider contacting local law enforcement. But considering how The Bad Guys™ use other dupes PCs as places to launch attacks from, you’ll not find the right guys.