Joomla Full Security Audit Cleanup

My Joomla site needs an immediate, thorough security sweep. I want a full-scale audit that digs into every core file, extension, template, and the underlying database. The priority is simple: hunt down and eradicate any malware, injected code, backdoors, or suspicious records hiding in the content folders or MySQL tables, then harden the installation so the same threat can’t slip back in.

Key expectations
• Run a comprehensive malware and vulnerability scan with industry-standard tools (e.g., Akeeba Admin Tools, Sucuri CLI, ClamAV, or your preferred suite) and manual checks where automated scans fall short.
• Clean or replace compromised Joomla, PHP, JavaScript, and media files without breaking site functionality.
• Scrub the database for malicious payloads, spam links, and rogue admin entries; optimise and repair tables as needed.
• Patch all discovered vulnerabilities and update core, extensions, and templates to their latest secure versions.
• Tighten permissions, adjust .htaccess rules, and add server-side protections (WAF rules, mod_security tweaks, etc.) to prevent reinfection.

Deliverable is a fully operational, malware-free site ready for public traffic. I don’t need a written report; just resolve the threats, confirm the site is clean through a final transparent scan, and let me know it’s safe to flip back to live. If you think user accounts also warrant inspection, I’m open to it, but the immediate focus is on the content files and database.

Please outline your estimated turnaround time, the tools you prefer, and any downtime the site might experience during the process so I can schedule accordingly.