How i can protect my wordpress from malware

Hi
i have a wordpress site each time a at it, my antivirus says it detected malware
each and everytime
i've been notified some of my visitors are seing this aswell

how can remove this?
can i run a tool? or is there a wordpress plugin?
Thanks

u need security plugins, wordfence is good

Try using the following scanner
http://hackertarget.com/wordpress-security-scan/