Honest verdict: if you have backups and an easy web-site, attempt it. You have nothing to shed apart from an afternoon. If the infection returns, you now know it is further than a file scan. Malware was located in wp-config.php and cron tasks; unauthorized admin users ended up removed https://fiverrclerks.com/