Client locked out due to malicious code

I have been contacted by a client who was locked out of their WordPress admin via a malicious code file. I am pretty sure I know which file it is and have a copy of the code.

I tried renaming the file, but that did not allow me access to the admin. I need some direction on helping the lady get back into her WordPress admin.