Urgent WordPress Malware Fix

My WordPress site has suddenly stopped working. Pages either refuse to load or hang indefinitely, and I’m worried the root cause may be malware or malicious code that slipped in through an outdated plugin or theme. I need the site cleaned, restored, and fully secured right away so customers can reach us again without warnings or redirects.

Scope of work
• Perform a full malware scan (database and file system) using tools such as Wordfence, Sucuri, or equivalent.
• Isolate and remove every infected file, script, or backdoor—no quick-hide solutions.
• Restore normal site functionality: front-end must load quickly and the wp-admin dashboard must be accessible without errors.
• Patch vulnerabilities by updating core, themes, and plugins, or replacing any component that cannot be safely updated.
• Harden security (strong .htaccess rules, file permissions, security keys, two-factor plugin if practical) to prevent reinfection.
• Provide a concise report of what was found, what was removed, and any steps I need to take moving forward.

I will grant temporary hosting and wp-admin credentials as soon as we agree to start; please be ready to jump in immediately and aim for same-day resolution.