I have the exact same problem. I am also using UAM – User Access Manager, I renamed the .htaccess and .htpassword files in my uploads directory and it fixes it. But maybe a week or so, intermittently 2 new (above) files appear.
My site is https://www.freemasonrytoronto.com
I think I need to deactivate or uninstall this plugin and find another one.