Cleaning hacked Blog is beyond me

The comedian, Steve Martin, used to have a routine where he said he bought a book entitled, “How to make a million dollars and not pay taxes.” The first sentence in the book was, “First, get a million dollars.”

That’s how I feel about the advice given in this forum about cleaning up a hacked blog. Everyone was very nice in steering me to all the appropriate posts and articles on the subject, but they basically all said the same thing:

1) Clean out the malicious code from your blog.
2) Upgrade to the latest verison of WP.
3) Add security features to your blog, so you don’t get hacked again.

Well, I did #s 2 and 3, but nobody really explains how to remove the malicious code from your blog (#1). So now I have a fully updated WordPress with security features installed, but with the same malicious code in it.

I think removing the malicious code from my existing blog is beyond me. What should I do? Is there a program that will remove the code for me?

My Blog: https://blog.fontanafirm.com/

Thanks for any help.