glad they found that. You may want to make sure it isn't lingering.
- Replace all WordPress files except the wp-config.php file via FTP with a new clean download from wp.org (though it sounds like your host already did this)
- Delete all themes you aren't using including Genesis
- Delete all plugins
- Upload a new copy of Genesis and remove any malicious code from the child theme. Since the child theme is simple it should be easy to identify code that wasn't part of the original theme or code you added.
- Log back into WordPress and change your password
- remove any users you don't recognize
- upload your plugins again, make sure they are clean copies
- change FTP passwords and do a virus scan on your computer and any other computer that has FTP or admin access to the site.
You should check out this article
http://www.copyblogger.com/wordpress-website-security/