I am not sure what you call diverts and where they have been placed.
If you have been hacked, your provider should be able to help you clean things up as they are motivated in not leaving malware on their servers.
Also, are you using a security plugin like the “Wordfence security” plugin (free version). If you do, it should have a scan / clean option.
If not, you should install “Wordfence security” and let it run a scan.
@weaver may have more info for you.