Malware attack

I have had a succession of malware attacks and the scan repeated indicates the following files suspicious
./administrator/components/com_easyblog/includes/xmlrpc/libraries/xmlrpc.php
./administrator/components/com_easyblog/includes/xmlrpc/libraries/xmlrpcs.php
./libraries/vendor/composer/autoload_classmap.php
./modules/mod_camera/tmpl/default.php
Can you advise please, clearly the two files at the top are part of easyblog installation. The site is currently clean as I have removed these four files