What the fixed fee covers.
- Certificate renewal or re-issue
- DNS correction at the registrar
- Hosting or WordPress restart
- Removal of an injected redirect
- Re-pointing the domain at a working page
- A short written note of exactly what was changed
Redirect removal on a WordPress install is limited to injected redirects and plugin cleanup. A deeper compromise is a rebuild, and you get told which one it is before you pay anything.