If you don’t feel up to the challenge of cleaning an infected site yourself, then you’re going to have to bring in some professionals. Sucuri and SiteLock are pretty awesome choices for malware removal if you don’t already have someone in mind.
While they’re cleaning up this mess, you can just enjoy this entertaining video about WordPress security: