Clean up the website from malware

We are having a job to clean up our wordpress website (hosted on Go Daddy) from malware as per a recommendation from the hosting team "We have activated hosting but the website is infected with malware. You need to connect to SFTP and download all hosting files in local system and then scan for anti virus. Then malware will be removed from hosting."