Clean & Restore Hacked WordPress Site

My small WordPress site – Bhaktivihar.com – runs on the free “The Church Lite” theme and only has four to five pages with simple event uploads, image galleries and a home-page slider. After two trouble-free years, the whole site (front-end and /wp-admin) suddenly stopped loading because of malware.

I have full access to the hosting control panel (cPanel) but I have not tried any scans or fixes yet, and unfortunately no usable backup exists. I therefore need an experienced WordPress security specialist who can:

• Locate and remove every trace of malware from files and database
• Restore the site and admin dashboard so events, images and the slider all function exactly as before
• Update WordPress core, theme and any plugins to their safe, current versions
• Harden the installation (firewall, file-permissions, brute-force protection) and configure an automated off-site backup plan
• Provide a brief cleanup report outlining what was infected and how it was fixed

The job is complete when the site loads normally, the admin area is fully usable, and a first scheduled backup successfully runs.