Good morning,
Sigh. I spoke with the hosting company and they ran a scan. I deleted the files they recommended. there was an old WP installation i used for a demo/beta site that I had forgotten all about, so they think this is where the attack began.
They also redirected the folder to which my site or database was pointed. (or something like that) I don't know how it got changed but they believe that was the nexus of the problem. The bad files are gone and finally the errors. I think we're good for now and i can schedule backups again so i don't have to go thru this again! Thank you so very much for all your help, because of you i now know how to access my logs.
thanx,
Erin