There is no way that the hacker is getting in through .html pages, so it might be that the site owner has a virus installed. It could also be that your email server is being hacked with packet sniffing if you are emailing your passwords to them.
Your friends over here at WebAssist! These Dreamweaver extensions will assist you in building unlimited, custom websites.
These out-of-the-box solutions provide you proven, tested applications that can be up and running now. Build a store, a gallery, or a web-based email solution.