I had the same issue. I removed the offending files (had about 150 of them starting with tetqwqsad…..) into a badfiles directory. I replaced wp-blog-header.php and .htaccess. That brought the site back up. Still not sure how it infected our site. Even SiteLock didn’t detect it.