Web site Security - malware

I need help with my website - I don't know why there is some new php files keep show up on the public_html every day - seem like hacker get in the site and upload those files. I did change all the password but they still get in .