Your plugin finds the malware on http://itca.co.za/student/, but when I click the remove button, I get the following errors:
fixing /home/itcacoz/public_html/student/wp-content/themes/cold-theme-powerful-wordpress-theme/cold/lib/timthumb.php ...
Fatal error: Cannot use object of type WP_Error as array in /home/itcacoz/public_html/student/wp-content/plugins/gotmls/index.php on line 146
When I log into the site, the WordPress dashboard RSS feeds on (incoming links, Plugins, WP Blog) says
Fatal error: Allowed memory size of 33554432 bytes exhausted (tried to allocate 491520 bytes) in /home/itcacoz/public_html/student/wp-includes/SimplePie/Item.php on line 1490
I upped the memory allocation in the config file to 64MB then upped it again to 128 and still not working.
Host provider has blocked curl_exec() if that helps
I managed to fix an identical site (http://itca.co.za/corporate/) which had the same malware infection