Remove Malware, Restore Google Ads

My WordPress site (www.normanbenett.pl) has been pulled from Google Ads because their scan flags a hacked-site infection tied to “livedashboardkit.info.” External tools (Sucuri SiteCheck and VirusTotal) show the domain as clean, yet the Google policy violation persists. I have full access to hosting, cPanel, file manager, database and raw server logs, so you can investigate at the deepest level.

I’m looking for someone who can trace the precise location of that malicious reference—whether it’s hidden in theme files, a plugin, the database, or through a subtle redirect—remove it safely and harden the installation so the issue won’t reappear.

Deliverables:
1. Complete forensic scan of all WordPress core, themes, plugins, uploads, and database, plus a review of server logs to locate every instance of the infection or backdoor.
2. Clean-up and replacement of compromised files with verified originals, plus patching/updating of WordPress, themes, and plugins.
3. Short report outlining what you found, what you removed, and recommendations for locking the site down (e.g., firewall/WAF, file permissions, security plug-ins).
4. Guidance or direct assistance with the Google Ads appeal until the suspension is formally lifted.

Please outline your methodology—CLI tools, WP-CLI, diff comparisons, security scanners such as Wordfence or MalCare, manual code review—along with an estimated turnaround time. The assignment is complete once Google confirms the site is clean and ads are running again.