Kaspersky got the alerts and your plugin saved the site tonight. Wordfence did not find most of the infections. Two nasty trojans + the gravity forms mess finally got it. Now Anti-Malware and BPSP are ON!
Donated! -- WP-Worker
Truly extraordinary service and a great tool that fixed hacked scripts rather than just deleting them as other tools wanted to do (which would have broken my site).