David Borrink said: I restored that file to the normal code and that stopped any activity....
I doubt that very much. If you didn't carefully follow FAQ My site was hacked - WordPress Codex, there's a good chance you will get hacked again.
And take a look at the recommended security measures in Hardening WordPress - WordPress Codex and Brute Force Attacks - WordPress Codex