"Malicious Files Detected"?

Hello! I've purchased theskyfashion theme in the past, and really liked it. I want to use it on my charity website, I've installed and tested it, but I keep getting error message from my webhost stating that our permissions are being reset to "0" from an outside source. We reset them every day, but this still happens. They suggested that I contact the theme creator directly. Can you please advise on this issue? The path of the compromised files are as follows:

The compromised files detected are:

/home2/nonamear/public_html/wp-content/themes/skyfashion_old/common/css/skeleton/index.php
/home2/nonamear/public_html/wp-content/themes/skyfashion/common/css/skeleton/index.php