Hi, usually hosting providers remove the malware.. Is there an ability to scan on hosting?
Are your passwords safe? You should not send them via skype, the passwords need not to be easy - need to be strong with A-z letters 0-9 and some _- characters.
We can change hosting, upgrade version of modx, see the rights for the files.
Regards Evgenia