Step 1: Contact Sucuri
Step 2: Done
You want a more detailed explanation? OK, if you insist…
Sucuri does website malware cleanup and monitoring and not just for WordPress for any website and for less than I charge for ONE HOUR they’ll cleanup and monitor your site for ONE YEAR. Trust me, it’s very doubtful I can cleanup you site in under an hour and if I did I still wouldn’t promise to clean it up again if it got hacked again with a year like Sucuri does.
Really just contact them. If you really still want ME to cleanup your site here’s what happens. I expense you for Sucuri and then I charge you for my time too. Sucuri works with lay people every day, just go contact them here.
What other recommendations do you make?
Web Hosting for WordPress
Performance enhancers for shared hosting
Software and development tools (coming soon)