Deep VPS Malware Cleanup & Hardening

My InMotion-hosted VPS (Linux, cPanel) has been hit and is now serving several different sites and applications that may be compromised. I need a security-minded admin who can jump in immediately, hunt down every infected file, clean or quarantine it, then close the holes that let the malware in—without breaking the running sites.

The job starts with a full system-level scan: web roots, mail queues, databases, and binaries. Once everything suspicious is isolated, I want clear confirmation that the malware is gone and each site is loading correctly. From there, tighten the server: update packages, patch cPanel, review user permissions, harden SSH, tune ModSecurity rules, set up a proactive firewall (CSF or similar), and schedule automated scans so this doesn’t happen again.

Deliverables
• Written report listing all infections found, actions taken, and files modified or removed
• Clean, fully functioning sites/applications with zero malware alerts
• Hardened server configuration (firewall, intrusion detection, updated software, secured services)
• Post-work checklist I can follow to keep the box healthy

I’m ready to grant root access as soon as we agree on the plan and timeline.