Hello,
That's what I do daily: I clean and secure malwared websites/hosting account - you may want to take a look at my feedbacks.
I'll efficiently clean and secure yours, just let me know.
Obviously, I'll fix the vulnerability, and I'll also harden your WP security.
Looking forward to hearing from you,
Adam