Hi,
I saw this problem too.
There is also an infected file index.php that keeps being re-infected no matter I rename, delete file/parent folders.
I ended up restoring a full server backup.
This needs deep investigation. What exploit is being used, etc…
Please ask WP gurus.
