Asumming the most positive scenario that only your wordpress got compromised you'll have to re-upload all the wordpress files so you are certain everything is clean. A worse scenario is when they placed some sort of backdoor or other malicious script in the database, in which case you must restore from a backup or manually go through the database and find it.

If a user indeed managed to compromise your site and upload malicious scripts you should consider everything that user can do possibly compromised though.

Also make sure to actually fix the issue, so update Wordpress, update the plugins, and update whatever else you have running. Otherwise there's little point in cleaning up.

Cheers for the advice. Ive cleaned everything up and so far my members are saying that virus warnings are gone. Ill be keeping an eye on it for a day or 2 yet.