Malware found in layerslider.kreaturamedia.js

Are you using Sucuri? I have received the same alerts that several (but not all) of our Enfold sites have malware for wp-content/themes/enfold/config-layerslider/LayerSlider/assets/static/layerslider/js/layerslider.kreaturamedia.jquery.js js.redirect.mass_domain.103

However, on a couple of the sites that are supposedly infected, Layerslider had already been removed through Enfold theme options. The Layerslider folders don’t exist, so I don’t see how they can have malware.