Step 1: Contact Sucuri
Step 2: Done
You want a more detailed explanation? OK, if you insist…
Sucuri does website malware cleanup and monitoring and not just for WordPress for any website and for less than I charge for ONE HOUR they’ll cleanup and monitor your site for ONE YEAR. Trust me, it’s very doubtful I can cleanup you site in under an hour and if I did I still wouldn’t promise to clean it up again if it got hacked again with a year like Sucuri does.
Really just contact them. If you really still want ME to cleanup your site here’s what happens. I expense you for Sucuri and then I charge you for my time too. Sucuri works with lay people every day, just go contact them here.
What other recommendations do you make?
Software and development tools (coming soon)