As part of the effort to stop the hacking of the site, I'm about to reset everyone's passwords. My apologies, but it looks like that might be where the problem is happening so this is one way to combat it.
Update: I just completed the reset. You should get your new auto-generated random password by email. If you don't have it, check your spam folder, it might be in there. Or, you can go directly to http://www.heromachine.com/wp-login.php?action=lostpassword to reset it manually with either your site username or registered email address.
My apologies for the irritation, believe me, I'm feeling it too.
