Clean WordPress Malware, Remove Google Warning

My WordPress site is fully updated—core, themes and plugins—except for PHP, yet Google has slapped a “Dangerous website” label on it. I need an experienced WordPress security specialist to step in, track down whatever malicious code remains, eliminate it completely and help me clear the warning.

Here’s what you’ll walk into:
• Latest WordPress version running on shared hosting
• Sucuri is active, but the last scan only told me something is wrong without pinpointing the infected files
• I have no idea where the malware hides, so discovery is part of the job

What I expect from you:
1. Run a thorough scan (Sucuri dashboard, WP-CLI, or your preferred tools) to locate every infected file, database entry or backdoor.
2. Remove or repair each malicious fragment without breaking site functionality.
3. Patch any vulnerabilities you spot—out-of-date PHP, weak file permissions, forgotten admin accounts, etc.
4. Generate a brief cleanup report listing what you found and what you fixed.
5. Guide me through requesting Google Search Console re-review so the “Dangerous website” warning disappears.

The job is done when Google acknowledges the site is clean and no red warning screen appears. If you can tackle this swiftly and keep downtime to a minimum, let’s get started right away.