Website hacked, Virus found, Is there anything I can do?

Hello,
last week my website was hacked. I enabled the option that users could register to my site. The role every user has in the beginng was Subscriber. THen I noticed that some strange accounts started to appear. I deleted them and disabled the option for registration.

Then two days later I got four mails from my webhost that they needed to deactivate some scripts on my site, because there was a virus found.

Here are the files that are effected.

– web46/html/michaeltaube.net/wp-content/uploads/ultimatemember/temp/rUTE9jGAkAVmUjM2gargpfIwgCx2SDa5TdROWRM7/stream_photo_9c8d90bc587c22ae9aef83fcdb2a02d0_5b69a9a725875.php (identifizierter Sch?dling: PHP.EVAL.CRYPT)

– web46/html/michaeltaube.net/wp-content/uploads/ultimatemember/temp/iEMIDgYn7A8szIwiBeFLlELPgFA8k3zFhC8SevWu/stream_photo_9c8d90bc587c22ae9aef83fcdb2a02d0_5b69c4a690214.php (identifizierter Sch?dling: PHP.EVAL.CRYPT)

– web46/html/michaeltaube.net/wp-content/uploads/ultimatemember/temp/Y17aKEfX2ce5DfW3FNFoEpNYTf7mn9gvzh4U533P/stream_photo_9c8d90bc587c22ae9aef83fcdb2a02d0_5b6aaa3bc105d.php (identifizierter Sch?dling: PHP.EVAL.CRYPT)

– web46/html/michaeltaube.net/wp-admin/network/plugins.php (identifizierter Sch?dling: PHP.EVAL.CRYPT)
– web46/html/michaeltaube.net/wp-content/plugins/siteorigin-panels/inc/settings.php (identifizierter Sch?dling: PHP.EVAL.CRYPT)
– web46/html/michaeltaube.net/wp-includes/feed-atom-comments.php (identifizierter Sch?dling: PHP.EVAL.CRYPT)
– web46/html/michaeltaube.net/wp-includes/Requests/SSL.php (identifizierter Sch?dling: PHP.EVAL.CRYPT)

In the mail the webhost wrote that it is not enough to delete the file. They recommend to delete the whole site and start if from scratch.

I’m very concerned and just want to gain some clarity if there is really no other option or when there is one, what do I need to do?

Thanks a lot in advance.

Kind Regards,
Michael

The page I need help with: [log in to see the link]