WordPress Malware Cleanup

I’m looking for an experienced WordPress security specialist to inspect and clean malware from my WordPress website. Bluehost has already performed a scan and identified 5 infected files, and I can provide the scan report for reference.

The work will include identifying the source of the infection, locating and removing malicious files or code, cleaning the affected files, and making sure the website is fully functional and secure afterward. I’d also like the site to be reviewed for common security vulnerabilities, with recommendations on how to prevent similar infections in the future.

In addition, I need help reviewing my Bluehost cPanel and removing old or unnecessary websites, including unused staging sites, to keep the hosting account organized.

If possible, I’d also like assistance adding a contact form to the website and configuring the email settings so contact form messages are delivered correctly.

Please share examples of similar WordPress malware cleanup/security projects you have completed and briefly explain your approach to safely handling an infected website.