Remove Malicious content from Wordpress WooCommerce site

I have a Wordpress WooCommerce site. Unfortunately, it got hacked and the webhost has disabled the site. The site has one custom plugin regarding shipping. Most likely, the PHP version needs to be updated as well on the Webhost. The webhost has sent instructions on what files have been infected and steps to handle it. I need help following the webhost instruction and update WP plugins to get the sites up and running again. The Wordpress site hasn't been updated in a long time. When it's done I need to use LocalWP to download the site locally.