I currently have a similar problem which might shed light on your problem.
A site I have had a ton of trouble with with hackers and all sorts. I just deleted all the corrupted files.
I now have a working site but when I enter domain/wp-admin I get 404 page. Is this what your client is getting? Any one know is missing for this to happen?
Thanks I’ll go read that.
But the theme I am working with is not showing the image in the visual but when published there is a copy of the featured img showing at the head of the post.?? And ideas?