Spam Issue

I hope someone can push me in the right direction. I have a hosted domain with A2hosting and about a month ago i started sending out some kind of mail that looks like its from me but with some zip file attach i guess a virus or trojan. I contacted the hosting company was told change the password so i did. But then about a week ago i started getting thousands of bounce backs and i knew there was a bigger issue. Contacted them again and there answer was change the password. So i started doing some tests myself and found out that when i suspend my outgoing mails the issue stops but as soon as i reactivate it starts again. I went back to them gave them the findings and they told me theres malicious code on my wordpress i need to update and find the code. so i went in checked everything got some funny time stamps deleted those but the issue still went on. Last night i scanned the site using