Not for website scanner a great tool for finding malware attack, but certain scanners are able to clean the malware as well. Follow these steps and remove malware from your website:
Change your WordPress admin password.
Change your FTP password
Check your .htaccess file/s for any malicious content and set the file permission (chmod) to read only
Follow these 10 Steps to remove Malware form WordPress website:
1.Backup the Site Files and Database
Backup the whole website and used by host’s site snapshot feature. It’s used to complete backup of your full server.
Use backup plugin, if you can login.
Use these additional backup steps
If you can login, also use Tools > Export to export an XML file of all your content.
2.Download and Examine the Backup Files
All the WordPress Core files : If you can download Wordpress form wordpress.org and check the files and download match. You won’t actually need these files, but you may want them for your investigation into the hack later.
The wp-config.php file: Name, and password to your WordPress information which we will use in the restore process.
.htaccess file: It’s invisible, Visible only on backup folder using an FTP program or code editing application.
The wp-content folder. Do you have see this themes, uploads, and plugins then that’s a good sign you have a good backup of your site.
The database: you have SQL file that is an export of your database and it’s good to have a backup.
3.Delete All the Files in the public_html folder
5.Reset Passwords and Permalinks
8.Upload Your Images from the Backup
9.Scan Your Computer
10.Install and Run Security Plugins
I have suggest following tips for remove malware from WordPress website
Create Website under maintenance.
Change all passwords
change WordPress security key
Take backup for your Worpress files
Use google chrome & Web Master tools checking Malware issue
Check malicious files on your web server & check code
Check you plugins
Check Hidden administrators
Find backdoors and remove
Change web hosting server
Check Penetration testing
Secure your email accounts
scan you computer security daily