I am sent to one of those pages that is almost impossible to close trying to sell me spyware removal when I click on Events.
There is the possibility that the database is involved but on average, I find the database isn't often the source of the hack. There is information in the guide for cleaning the database but I suggest you leave the database to last.
Why wouldn't you want to follow the guide that is proven to remove the malware from your site?