I'm facing an unusual situation for the last 3 months, to which I have reached the limits with Wordpress support, so I'm considering looking at the OS which may have scripts running to maintain this virus. All my Wordpress sites on my ISPConfig3 server is automatically getting a plugin installed. This virus is creating users within the wordpress, its creating plugin folders in the database, its changing admin email addresses and passwords, as well as adding more admins when i install plugins such as wordfence, the virus will actually inactivate and delete the plugin when changing the password to something I know via the DB, whilst logged into wordpress, the virus will rechange the email address, password and log me out of the admin dashboard. After some time, the virus will disable the front page of the website and also damage the database. I looked thought many wordpress forums and asked many wordpress users, no one knows about this virus, so I'm thinking its a script within my OS... anyway to help me resolve this? I attach some screenshots.