Clean Malware From WordPress Blog

My WordPress blog—normally updated a few times a week—has started behaving oddly in ways that don’t fit the usual redirect, pop-up, or slow-loading patterns. I haven’t pinpointed the exact source of the infection, and I haven’t run any scans, restores, or password changes yet. In short, the site is still in its original, compromised state and needs a thorough cleanup.

What I need from you is a complete investigation, removal of every trace of malware, and practical steps to harden the installation so this doesn’t happen again. Feel free to use whichever tools you trust most (Wordfence, Sucuri, Imunify, etc.) as long as the final result meets the criteria below.

Deliverables
• Full scan and written report of findings
• Removal of malicious code, files, database injections, or backdoors
• Core, theme, and plugin updates or replacements where required
• Security hardening (firewall rules, login protection, scheduled scans)
• Post-cleanup confirmation that the site passes an external malware scan and Google Safe Browsing check
• Brief hand-off notes so I can keep the site clean going forward

I’ll give you immediate access to the hosting panel and WordPress admin as soon as we start.