Urgent WordPress Malware Cleanup

URGENT: WordPress Website Malware Removal & Restoration

I have a WordPress website hosted on BlueHost that has been infected with malware. My Monarx security scanner has detected 1,768 malicious files that need to be removed and the site needs to be fully restored and secured.

SCOPE OF WORK:
1. Remove all 1,768 malicious files detected by Monarx malware scanner
2. Clean all compromised WordPress core files, theme files, and plugin files
3. Remove phishing files (LinkedIn and WeTransfer phishing pages found)
4. Restore the website to full working condition
5. Secure the site to prevent reinfection

KEY DETAILS:
- Hosting: BlueHost (cPanel access available)
- Scanner: Monarx (1,768 files detected across 5 pages of results)
- Malicious files found in: /wp-content/plugins-disabled/ (multiple plugins), /wp-content/themes/, /user/linkedn/linkedin/submit.php (phishing), /access/linkedin/LINKEDIN/submit.php (phishing), /set/wetransfer/WeTransfer/send2.php (phishing)
- Compromised WordPress core files in /wp-admin/, /wp-includes/ directories
- 32+ malicious files in wp-file-manager plugin alone

DELIVERABLES:
1. Complete removal of all malware
2. Cleaned and restored WordPress installation
3. Reinstallation of all plugins from official sources
4. Security hardening (passwords, updates, firewall)
5. Post-cleanup malware scan showing clean results
6. Documentation of all work performed

Please provide your experience with WordPress malware removal, estimated timeline, and approach. Access to cPanel and WordPress admin will be provided upon project award.