Thanks for your helpful posts.

I am using Managed Wordpress.

I have tried to quarantine, remove files, using WordFence, WebDefender, etc.

The malicious files keep coming back. 

I am about to take the site down and reinstall from scratch.