This situation may occur if your WordPress has not been updated for a long time, especially plugins. Malware removal starts with the manual scan of files on ftp as well as the database itself to prevent possible future attacks.
Finally, we’ll set up a security package on your site to minimizes these issues.