I have the same problem and I’ve checked my files with sucuri and wordfence, but the best solution was to check the files with the ClamAV® Virus Scanner which is installed in my cPanel. It has detected many infected files and they were mostly index.php in different directories. I hope this can help..
