Also does not work on a Bluehost hosted sub site. Same sequence of events that FunkyCreep experienced.
Sorry for the miscommunication. I was reporting a solution to this malware problem. It is gone. Other recommendations in your link have been followed. Again I was pointing out the exact location of the malware, as “finding” it the “most difficult” task, as the link correctly reports.