I had a similar incident. A client received an email from GoDaddy that their site had been infected. The file was ../wp-content/w3tc/log/03e0d236_infoold.php. What can be done to further lock this folder down? Current chmod is 705. I do not have this file for review as it was deleted immediately.