Removing malware from my server and eventaully hardening debian

i suspect the male ware was implemented via wordpress blog, i already deleted it but it shows that i still have the malvere via virus total scan, so i need an specialist to resolve this for me. here is the data which i recived from virus total scan: A Latest detected files that embed this domain in their strings Latest files that are detected by at least one antivirus solution and embed URL pattern strings with the domain provided. 1/58 cff64421bd551ffe7fad5e43a083e21b27ce299aa2429a5a4ae1fb95701762db Analyse: Antivirus Ergebnis Aktualisierung Webroot [login to view URL] 20170221 File detail: Content types rels xml Package relationships word/[login to view URL] docProps/[login to view URL] docProps/[login to view URL] [login to view URL] Core document properties creatorribbun lastModifiedByribbun revision1 created2017-02-21T05:17:00Z modified2017-02-21T05:19:00Z Application document properties TemplateNormal TotalTime0 Pages2 Words288 Characters1648 ApplicationMicrosoft Office Word DocSecurity0 Lines13 Paragraphs3 ScaleCropfalse LinksUpToDatefalse CharactersWithSpaces1933 SharedDocfalse HyperlinksChangedfalse AppVersion12.0000 Document languages LanguagePrevalence en-us2 ar-sa1 File indedification: File identification MD5 05a1b8fbe0d74c547d1af222287163cc SHA1 a661d9359eb24df280110728ea167f415af5c102 SHA256 cff64421bd551ffe7fad5e43a083e21b27ce299aa2429a5a4ae1fb95701762db ssdeep192:ScIMmqVOb4JgylPSLkty5bv/0RoJ4aN2HJgV1WEdnOS3SPt/XPCQA:SPckbogyNcPXq81PdJA/XPtA File size 11.7 KB ( 11933 bytes ) File type Office Open XML Document Magic literalZip archive data, at least v2.0 to extract TrID Word Microsoft Office Open XML Format document (85.4%) ZIP compressed archive (14.5%) Tagsdocx VirusTotal metadata First submission 2017-02-21 05:20:57 UTC ( vor 4 Monate, 2 Wochen ) Last submission 2017-02-21 05:20:57 UTC ( vor 4 Monate, 2 Wochen ) Dateinamen [login to view URL]