Hacked again…
Good heavens… only half an hour to sort out this time. It seems there’s was another Base64 section in functions.php in this free theme – and the Antivirus plugin didn’t pick it up. I have now checked the whole theme by hand and removed the offending code.