I would download copies of these four things:
phpMyAdmin SQL export of the database tables
/wp-content/ folder and all of its contents
wp-config.php
.htaccess
At that point, I would have BlueHost reset or "nuke" the account, then get a fresh installation of WordPress working, secure it well and put up some kind of maintenance or "Returning soon" notice while going through /wp-content/ locally to prepare it for re-upload. Then when that is ready, I would upload the database as a separate database to see what I have. None of that is nearly as difficult as it might sound, the monetary expense is zero and it is a lot less work than trying to clean the site to BlueHost's satisfaction. I have BlueHost also, and we can walk through all of that right here if you might be interested.