Fix a Debian vServer from malicious software that sends phishing mails. Probably just from a WP in a docker container.

Our vServer started to send phishing mails, so the provider deactivated it and we can access it now through a rescue system where we can connect to via ssh and mount the drive from the former server. 95% likely, a wordpress installation got malwared, that runs inside a docker container. The wordpress files are in a folder on the server, that is mounted in the docker container. We now deactivated the docker container from autostart. We need a specialist that cleans the server/wp from the malicious files, updates wp and prevent the server from beeing used by anyone else. If you are able to do some security checkings and give some tips and hints, you are welcome. Job includes: - Short, but precise documentation of what was found, and what was done. - Full restoration of functionality. - Handles the data on the server with respect to data security. - Since I don't give the full power over the server unobserved into someones hand (had very bad experience) that I don't know, the work will be done over TEAMVIEWER on my pc that is fast and has a sufficient internet connection. You will have full control over the putty SSH window and you'll be able to work as you wish. - You should be quite confident that it is likely that you can do the job in less than about 6 hours (I know this is hard to do, but at least a bit - I can't pay like 15h), I only want experienced experts to apply for this. - Since I work in the hospital we will make an appointment to begin doing the job. My next possible slot is 22.09. 17:30 Central European Summer Time, which is GMT+2 If you are fine with that, be welcome to solve some sneaky stuff ...