I have also ensured all user accounts on the site have new extremely safe passwords.
Hello
It has the latest version of wordpress and latest enfold.. latest plugins… I just deleted a few that were not active but showed up in the malicious files list… (Jetpack?)
Now installed
Contact Form by BestWebSoft
RSS Includes Pages
XML Sitemaps
Happy to make you an admin account to login if you want to have a look, or FTP account?