Who is perrrsik.com? That doesn’t seem to exist. Is it part of the malware code. If it is then we don’t care about it anyway except to be glad it doesn’t work.
Your own DNS looks okay… So-so anyway.
What I’d do in your case is install the latest PHP version I can run. Shoot for 7.x but 7.2X seems to be problematic for some installs. That’s more likely due to theme or plugin issues but I’ve seen a few cases. 7.1 seems to work and 5.6 is very stable but deprecated.
Once you’ve found the higher version you can run. Clear that Malware again.
Install iThemes Security and WordFence. They work well together.
Scan that site with WordFence and https://sitecheck.sucuri.net/
Now call your host and have a chat with them about this recurring problem. You might have an infected neighbor on the host you’re on or there’s a security hole they need to plug.
If I didn’t get some kind of helpful answer I’d probably just pick up and move to a different server there or even a different host if I got mad enough.
What you are doing when you contact them is establishing a pattern where you might be able to say, “I’ve contacted you several times now about this issue”… helps even more if you keep good notes and records. Even more yet when you can tell them you did ‘such and such and this and that’.
Another thought… I think CloudFlare has an edge server or two there in Poland. Why don’t you signup for CloudFlare and let them handle your DNS at least? That will hide your IP address anyway. It’s free.
