Eliminate WordPress Malware Infection
Budget: $2 – $8 USD
My WordPress site has started acting strangely—unexpected redirects, odd pop-ups, and sluggish load times. Those symptoms led me to scan the installation and confirm a malware infection. The task is to track down every infected file or database entry, remove the threat, and harden the site so the problem doesn’t recur.
No mainstream security plugin (Wordfence, Sucuri, iThemes Security) is active right now, so part of the work involves selecting, installing, and configuring a robust solution that fits the site’s needs.
Key deliverables
• Full malware clean-up of core, themes, plugins, and database, with a concise log of what was found and removed.
• Hardening steps applied—updated salts, corrected file permissions, secured wp-config, firewall rules, captcha or rate limiting where appropriate.
• Installation and configuration of a reputable security plugin with real-time monitoring enabled.
• Post-clean guide outlining preventive measures I should follow.
Acceptance criteria
The site must pass a clean scan with VirusTotal (or similar) and load normally on desktop and mobile without triggering browser or host security warnings for at least seven consecutive days after hand-off.
Include your preferred tools, estimated timeline, and any relevant experience with WordPress malware removal in your response.
No mainstream security plugin (Wordfence, Sucuri, iThemes Security) is active right now, so part of the work involves selecting, installing, and configuring a robust solution that fits the site’s needs.
Key deliverables
• Full malware clean-up of core, themes, plugins, and database, with a concise log of what was found and removed.
• Hardening steps applied—updated salts, corrected file permissions, secured wp-config, firewall rules, captcha or rate limiting where appropriate.
• Installation and configuration of a reputable security plugin with real-time monitoring enabled.
• Post-clean guide outlining preventive measures I should follow.
Acceptance criteria
The site must pass a clean scan with VirusTotal (or similar) and load normally on desktop and mobile without triggering browser or host security warnings for at least seven consecutive days after hand-off.
Include your preferred tools, estimated timeline, and any relevant experience with WordPress malware removal in your response.