I've been handed over to manage a small Joomla website for an Italian B&B: nonnaninna.it, which was hacked late last year. The site has been corrupted and currently shows a blank/white page. The main index.php and possibly other files contain obfuscated malicious code. I need an experienced Joomla / security specialist to: 1. Malware cleanup • Identify and remove all malware and backdoors from the Joomla installation (files and, if needed, database). • Fix the current issue so that the public site loads normally again (no redirects, no white screen). • Ensure there is no remaining hidden or conditional malware. 2. Upgrade and hardening • Upgrade Joomla from 3.10.x to the latest stable Joomla 4/5, keeping the existing content, menu structure and template if possible. • Update all installed extensions/plugins/modules to their latest compatible versions, or clearly indicate if any are obsolete and should be replaced. • Implement basic security hardening (file permissions, configuration, security extensions, etc.) to reduce the risk of reinfection. 3. Environment details • Hosting with Ergonet (Italian provider). • Hosting control panel / WebPanel is in Italian, but the Joomla administrator dashboard is in English. • I will provide: FTP access (separate user limited to this site). Joomla Super User account. No direct root/SSH access. 4. Deliverables • Clean, working site at https://www.nonnaninna.it with all main pages visible. • Joomla core and extensions updated to current stable versions. • Short report listing: • What malware/backdoors were found and where. • Which files were changed or removed. • What was updated (Joomla version and key extensions). • Any recommendations for further security or hosting changes. Please only apply if you have strong experience cleaning hacked Joomla sites and performing Joomla 3 → latest upgrades. In your bid, include a brief summary of similar Joomla clean‑up/upgrade jobs you’ve done and how long you expect this to take.