Remove the infected files: Once you’ve identified the infected files, remove or clean them. Make sure to create a backup of your clean website files.
Update your software: Ensure that all your website software, including the CMS, plugins, and themes, are updated to the latest version.
Change your passwords: Change all passwords related to your website, including the admin panel login, FTP, and database access, and rotate any API keys.
Review user accounts: Check for any unauthorized user accounts on your website and remove them. Check for page rules redirecting your site to that file download,
Harden your website security: Implement additional security measures, like enabling two-factor authentication, using a Web Application Firewall (WAF), and restricting access to your website’s admin pane