Malware in header.php [closed]

Sorry to hear. You may want to look through the steps and suggestions in this WP Answers post:
Verifying that I have fully removed a WordPress hack?