Another smart(faster) yet safer way to detect which files being infected is to download the full backup of your website from your cPanel. Once the compressed backup(usually in .zip format) has been downloaded to your PC, do not extract the backup first. Instead, you should scan the compressed backup using your anti virus software. I've used Avast to detect the infected files since it is free
Remember to jot down the list of the infected files every time the antivirus give you warning of threats. You'll need the list to fix your files later on.
Now, you can go to your cPanel and edit the infected files through your
File Manager. Usage of File Manager to
remove the iframe hack is safe and easy to perform.