Hello, Heidi. My bid include removal of malicious code + 5 extra days for you before deposit release, so we can be sure there are no deeper source of virus inside files or database.
I have wrapped timeframe at approx. 6 days. I suppose your site will be "up and running" much faster, but I had to add few days for deeper testing.
Thanks.