The basic package includes reinstall of WordPress core and removal of suspicious external scripts. This can sometimes be enough to clean your website, but smarter hackers can put malicious code in plugins and themes. I highly advise you that you choose 'Total Cleanup' package, which guarantees that your website is completely clean from malware.
If you want to have a fresh start and switch hosting, I have a gig extra just for that.
- CPanel access
- MySQL database access
- WordPress admin credentials.
- clean copies of used premium plugins and/or theme (total cleanup package)