WordPress Malware Removal and Security Recovery

I require an experienced WordPress malware-removal specialist to: - Preserve a full backup of the current website and database before making changes. - Inspect WordPress files, the database, users, plugins, themes, WP-Cron and server cron jobs. - Identify and remove malware, backdoors, injected code, unauthorized users and spam content. - Determine how the unauthorized posts are being created and stop the automated process. - Replace WordPress core files and reinstall plugins and themes from clean, trusted sources where necessary. - Review wp-config.php, .htaccess, advanced-cache.php, cache folders, upload folders and must-use plugins. - Check whether other websites or directories within the same hosting account are affected. - Coordinate with the hosting provider where access to server logs or account-wide scanning is required. - Preserve all legitimate historical posts, pages, images and website functionality. - Harden the website after cleanup, including password reset guidance, security salts, two-factor authentication, backups and monitoring. - Provide a written report listing: the malware and suspicious files found; unauthorized database entries or accounts found; files changed or replaced; cron tasks removed; probable entry point, if identifiable; steps taken to prevent recurrence.