I’m having the same issue on Bluehost. What ISPs are you folks on? In fact, it seams to me that all of my shared hosting sites are infected. I’m not sure exactly what these hackers want, or why they are doing it. One thing is for sure though, it’s forcing me to learn how to be a sysadmin. I have about 20 sites on Bluehost, and I’m moving them to Amazon AWS because I’ve decided I have to take total control of my sites. My new plan is to be able to delete and restore every site I own. Very disappointed with Bluehost, but I’m not sure who is at fault! Maybe it’s a fundamental WordPress issue. However, on the sites I’ve migrated to AWS, I haven’t had any problems yet. Maybe I’m just not a target there. If you want to learn how to migrate your site to a cloud environment that you have total control over, email me! [email protected]