Hi @cabbagetree,
If you require a domain review further down the line, Google will need to be contacted to remove the blacklist status of your site. However, we do see that your scan from yesterday on that domain flagged 16 files from 2 signatures, so there could be malware that either recreates itself after deletion or affects scans.
We are unable to provide step-by-step assistance through a site cleaning here on the forums but we do have helpful resources that can assist you. You should try the following checklist:
https://www.wordfence.com/docs/how-to-clean-a-hacked-wordpress-site-using-wordfence/
Make sure all of your plugins and themes are up-to-date and that WordPress core is on the latest suitable version. As a rule, any time someone thinks their site has been compromized, they should?update their passwords for hosting control panel, FTP, WordPress admin users, and database?in order to cover the key access points where somebody could change or upload things on your site. Make sure to do this – and check for admin level users in WordPress that shouldn’t be there!
Additionally you might find the WordPress Malware Removal section in our free Learning Center helpful.
Before attempting a site cleaning, we always recommend that you make a full backup of the site beforehand.
Many thanks,
Peter.
