I found it with help from someone at AVG!
He told me the injection was right after the BODY tag.
I found it in my header file.
It was a javascript injection that looked like this
if(document.getElementById('hideMe') != null){document.getElementById('hideMe').style.visibility = 'hidden';document.getElementById('hideMe').style.display = 'none';}