Malware/viruses reside in multiple locations on WordPress sites. They might be in your theme files, database or in WordPress core files.

These viruses can show weird content on your sites and in google search results, it can also slow down your site drastically, and in the worst case, your site can redirect to somewhere else. This can hurt your business and you will definitely lose your customer and search ranking on google.

I am going to explain you the general steps that I am taking in order to clean the websites from malware/viruses so that you can know the person you are going to hire knows what he is doing.

1. Back up website files and database.
2. Manually scan theme files, database and WordPress core files for malicious code.

Above are the general overview of how I am looking for malicious code but behind the scenes lot of work is required.

For your end, I need the following details.

1. Detail description of the issue you are facing.
2. Login credentials of your Hosting/Cloud provider.
3. Login credentials of wp-admin backend.

You need to provide more details if required.