How to remove virus on academic Wordpress template?

Question

Malware

Good day!

I installed the ecademy template , downloaded from a dubious source. At the beginning, the plans were testing, only then buying and using. It just so happened that the template was left as it was, and the license for the downloaded template was implemented. Later I noticed when I started testing on different browsers, spam banners pop up between blocks. One feature, the virus appears when you first open the site, or when you click on the page again, or in incognito mode. As soon as you go through registration and authorization, the virus stops popping up.

Each time the script creates frames with a new id, so

there is no point in blocking the block.

I tried to scan files on all popular scanners, installed many plug-ins, so far no results. There are suspicions about the elementor pro plugin, but I didn’t find anything suspicious there either (the virus pops up, for example, between the message sending window and the "send" button, or in the footer). The peculiarity of the theme is that there are also plugins inside the theme and you also install plugins on wordpress (built-in theme plugins).

I used to find and remove all sorts of viruses, now I'm at a dead end. Maybe someone will look at the site and tell you in which direction to dig?

Answer 1

Buy here https://wpnull.org/wpthemes/maxcoach-a for 299 rubles, rebuild the site from scratch and not deal with garbage