MalWare Protection – How to Choice?

I am with the South Surrey and White Rock Art Society and they are having an issue with their web site and I was hoping I could get a little advice from you. They are using BlueHost for the web service and had a malware attack. The first attach, we were told we could fix it by deleting some files or get them to do it. After hearing the price, we decided maybe we should try it. They then offered to fix it and give us a year protection for what they initially said it would cost. We did it and it worked. BlueHost recommended to install/purchase SiteLock Fix at $89/year, so we did. A few months later it happened again. I then went onto BlueHost web site and it lead me directly to Sitelock where they told us to get their SiteLock Infinity service for 3 months at $75 a month, so we did and canceled Fix. We not longer need Infinity, so I have now been talking with SiteLock and they say to get SiteLock Enterprise because we have 2500 pages and we can get a deal for $200 per year? I then went back to BlueHost to see what they have and what they have on their web site they no longer sell, but recommends Fix, but SiteLock says Fix will not handle 2500 pages and I do not know what a page is!
We just want to keep our website malware and virus free so our members and others can come and see what we are doing and signup for classes. The other problem is BlueHost says it has security SiteLock when you signup. I guess it just detects and I assumed more!