Urgent WordPress Malware Cleanup -- 2

My WordPress installation has clearly been hit by malware. At the moment I can’t add any new changes to the main site, and a second connected site will not load at all. I need a specialist to jump in quickly, identify and remove every malicious file or database entry, then harden the setup so this doesn’t happen again.

Scope of work
• Perform a full scan (core, themes, plugins, database) to locate infections.
• Clean or replace compromised files and remove back-doors.
• Restore the second site so it loads normally.
• Make sure I regain the ability to edit and publish content.
• Patch WordPress, themes and plugins to their safe versions and configure best-practice security (firewall, login protection, file-permissions).
• Provide a brief report outlining what was found, what was fixed and the steps taken to secure the server.

Acceptance criteria
• Both sites load without errors or redirects.
• Dashboard allows normal updates and new content publishing.
• Independent scan (e.g. Sucuri SiteCheck) comes back clean.

I can grant cPanel, FTP/SFTP and WordPress admin access right away so you can begin as soon as we agree.