How to remove two-factor authentication if the codes in the app have expired

Good day. There is a website from 2019. An old website. It's a business card type website + some sections with job vacancies. It's clear that everything there is outdated and so on. We need to understand if we can access the database and whether it's possible to make changes or if it's better to write a new one from scratch. Please write in private messages - we will discuss everything. As for the price - we will agree.

Good day! Our Joomla website has been hacked. Initially, the attackers defaced it (wrote "Hacked by Antonkill"). After attempts to clean it ourselves, the hackers returned and installed a malicious script: now, when accessing the site, a foreign blurry screen with a fake captcha (phishing/redirect) is displayed. The hosting provider constantly sends notifications about infected files.What needs to be done: A complete audit and cleaning of all website files and the database from viruses, shells, phishing scripts, and backdoors. Finding and eliminating the vulnerability that led to the hack (updating Joomla, plugins, closing holes). Checking the database for hidden administrators created by hackers. Setting up basic website protection (configuring .htaccess, restricting folder permissions, installing security components like RSFirewall or equivalents). Removing the site from antivirus/search engine blacklists, if it has been listed.Please contact specialists who have real experience with Joomla security. A guarantee for the work will be required (that the viruses will not return within a few days). Access will be provided via temporary FTP/SSH.

A virus has appeared on the host that infects different websites. It is necessary to identify where the virus is coming from and remove it.