Malicious code is in header.php file. Open it and delete everything between
<?php wp_head(); ?>
and
</head>
clean version uploaded sorry i didnt checked before uploading
Honestly, I personally prefer premium themes supplied by a reliable provider
https://www.templatemonster.com/ . Usually, all their themes are properly coded ans well supported. I'm going to get one for my client's real estate website.
