Once you're sure that the malware has been removed from your website, you would need to submit their Review form which can be found here -> https://support.google.com/google-ads/answer/9841640?visit_id=638549257007419150-1254906529&rd=1
Before you submit this, please be sure to read the section carefully. Tips for writing a review request for success:
1. It is important to note that there is a chance that there is more than one reason for the Google AdWords account suspension. Each reason needs to be individually addressed.
2. Be super careful about the information you are providing. Any mistakes you make will be seen as false information. Treat the form as a single chance to recover your Ads account.
3. At the end of the form, there is an option called ‘Summary of the Issue’. Here you need to speak about not just the issue, but most importantly what steps you took to fix the problem.
4. You have the option to attach a file to the form. This is an excellent opportunity to provide additional relevant details. For instance, if your website had malware and you removed it, send a report of the cleaned files to Google.