Bad usernames, bad passwords, old, non-updated core files, there are many reasons people can infect websites with malware, especially if you have a WordPress site. I can clean your site up and make it much harder to crack in the future. Usually within 24 hours.