THIS PLUGIN HACKED MY SITE!

No it never.

Highly unlikely. I’ve used that plugin myself before now – with absolutely no problems. It’s far more likely that the OP’s site/server was hacked and the plugin had nothing to do with it. People should be careful about throwing these kinds of accusations around without confirming them 110% first. If a dubious plugin is suspected and confirmed, then you should contact plugins@wordpress.org directly.

Perhaps but that does not warrant an unsubstantiated report that it is responsible for any hacks etc.

I contacted my host, who removed the rest I didn’t find. You’re right. All the articles say check .htaccess, but they inject a fake one in EVERY folder. This hack seems to be common but not often talked about, probably because many people wouldn’t notice and would assume their site is just messed up.

http://wordpress.org/support/topic/brend-storeru-hijacked-my-site-via-a-plugin#2159235

The OP has now recanted the original accusation. This topic is now closed.