Fix Malware Injection

Sometimes my sites is getting redirected to other sites. Not all the time and not all the pages.

The redirection follows like this.
First it redirects to: https://webdevhelp.net/newnew/binaryoptions/googletrader.php?mn=2561230954
Then: https://financetimes.co/work-at-home-mom-true-success-story-googletrader/

I searched a lot and found this code through chrome “Inspection”
<script type=”text/javascript” src=”https://www.wp5s.org/jquery.js”></script&gt; Which is a blank file.

Scanned with https://sitecheck.sucuri.net and couple of other but couldn’t find anything then https://www.unmaskparasites.com/ showed me the code.

Disabled all the plugins still the code appears there randomly in any page. Gone through headers & footers theme files, functions and .htaccess but nothing is there with “wp5s.org” (BTW I am using Cloudflare.)

Any suggestions how to get rid of it. Gone through this article: geekybits.in/how-detect-malware-injection-solve-what-is-wp5s-org but the problem remains.

For me restoring from back is not possible at this point.