All malware attacks seem similar in nature. I have removed malware on 4 sites in the past four weeks. In each case, finding and removing infected files ranged from easy, to a huge pain. My impression is that you cleaned out what you could, but you’re missing some infected files. A wild guess would be to check the Plugins and Uploads folder for suspicious files. If you have a plugin that you’re not using, delete it. I’d like to help you out, but it’s difficult to respond with a ‘fix’ other than share other experiences. Esmi was trying to help out by arming you with knowledge of other malware cases.
