Please help. My

Please help. My host last week told me that one of my plugins was causing an issue and they suspended my account. Prior to that it was working just fine. After day of negotiating with them, they restored the site but it was a complete mess, I could barely access dashboard and the site did not load properly. By that time they only had a backup that did not go far enough back to before the plugin issue was brought up. So now, neither my host or myself has a backup that is older than when the issues started.

In cpanel error log I see this which my host said doesn't mean anything?!

In DNS Zone Editor I see several entries that look like this:
"https-paypal-secure-authentication-update.mydomain.com"

Under Addons and Subdomains, I do not see that subdomain. I never created it and I do not have PayPal anything.

In wordpress wp-content/ I see a file called db.php which was created today shortly after site was restored by host. I dont know what this is either.

Also, my htaccess file was changed at the same time this morning with this new part in it:

# php -- BEGIN cPanel-generated handler, do not edit
# NOTE this account's php is controlled via FPM and the vhost, this is a place holder.
# Do not edit. This next line is to support the cPanel php wrapper (php_cli).
# AddType application/x-httpd-ea-php56 .php .phtml
# php -- END cPanel-generated handler, do not edit

Again, I did not do this and I have no idea what FPM means.

I created a new password for you to access my FTP to check it out. Can I give it to you to look into?