Right guys Ive spoken to a lot of people including wordpress. They say this is false positive. I am beginning to get a little angry now as this has rumbled on for over a week and we are no further forward. Avast are costing my customers and Money. This is the latest response from a moderator at Wordpress support

I am saying I don't show you hacked and neither do 8 other sources according to Securi.

If Avast is the only one showing a problem then they are better than all the rest or it is a false positive.

Please can you advise on how to move forwards please.