Malware Removal.

I found malware in my header.php file. I removed it and changed my password but it showed back again. How do I find out the source and terminate it for good?
Thank you.