Yes! I have an infected file: /wp-content/plugins/LayerSlider/static/js/layerslider.transitions.js php.base64.v23au.183.
It looks like they want €50 to clean it up though. Is there an any way for me to do this? I'm sure my client won't mind paying.
Thanks so much again!