<script
data-cfasync="false"
type="text/javascript"
src="//s7.addthis.com/js/300/addthis_widget.js#pubid=wp-47bcc257b2aeb6d3b74684a3c431cf31 "
async="async"
>
</script>
this is the script above and the above jas shows that you have got trojan in this file. why do you add trojan? please remove it.