Find and remove virus software on the site

The site was hacked, viral Software was installed, which sends data from the attackers login to the site when restoring the site from the back-up, you need to find a solution by the end of the week, I will provide a link to the site in person communication