Manual removal, for which you need to:
Back up your site.
Use anti-virus and malware scanning software on the backup locally.
Eliminate malware by tweaking your WordPress files and deleting old or suspicious ones.
Reset all user passwords and check for suspicious users.
Reinstall plugins and themes.