How can someone add maleware to a site they have no access to edit? I had someone do this to one of my sites and was unaware until I was notified by Google they listed it as a threat. How do you stop this?

Also I heard that if you take a site down off the Internet that it may not be removed from the Internet? Is that possible?
