
Completed
Posted
Paid on delivery
My small WordPress site has suddenly started burning through huge amounts of bandwidth, and my host believes something malicious is running from inside the installation. I have not changed passwords, installed any security plugins, or taken any other protective steps yet, so the site is still in the exact state where the problem can be reproduced. Key facts you should know • WordPress is on the latest version. • One file, dated 05-22-25, looks suspicious according to the host. • I need complete malware removal first, then hardening to keep this from happening again. Here’s what I need delivered: • Locate and remove every malicious file, script, or hidden task. • Verify the site loads normally and bandwidth returns to expected levels. • Provide a short report detailing what was found, what was removed, and any vulnerable settings you corrected. • Recommend (and if possible, implement) basic hardening steps such as updated passwords, security plugin setup, and server-side rules. Once the site is clean and secure I’ll take it from there, but I need your expertise to get it back to a safe baseline quickly.
Project ID: 40440586
184 proposals
Remote project
Active 4 days ago
Set your budget and timeframe
Get paid for your work
Outline your proposal
It's free to sign up and bid on jobs
184 freelancers are bidding on average $410 USD for this job

Hi, I can clean your WordPress site by tracing the suspicious file, scanning themes, plugins, uploads, cron jobs, and database entries, then removing malware without breaking the site. I’ll verify bandwidth behavior, restore normal loading, harden logins, permissions, security rules, and provide a clear report of every fix made. Let's discuss in chat as I have some queries to ask regarding the project to proceed further.
$250 USD in 7 days
9.6
9.6

⭐️⭐️⭐️ WordPress Malware Removal & Security Hardening ⭐️⭐️⭐️ Hello, I checked JD and you want — an expert to identify and remove malicious code from your WordPress site, restore normal performance, and implement essential security measures to prevent future attacks. • Full malware scan & infected file detection • Removal of malicious scripts, backdoors & hidden tasks • Core file integrity check & cleanup • Suspicious file audit (including flagged date file) • Database scan for injected code • Bandwidth abuse source identification • Website functionality verification post-cleanup • Security hardening (permissions, configs, access rules) • Password reset guidance & implementation • Security plugin setup & configuration • Basic firewall & bot protection setup • Backup setup for recovery safety • Final report with findings & fixes Let’s chat… Thanks
$540 USD in 12 days
9.6
9.6

Hello, I will perform a thorough malware clean-up on your WordPress site, identify all malicious files and hidden tasks, and then implement solid hardening to prevent recurrence. I’ll start with a full malware sweep, verify site integrity and performance, and deliver a concise report outlining what was found, what I removed, and any security settings I corrected. I’ll also implement practical hardening steps such as strong passwords, security plugin configuration, and server-side rules where feasible, aiming to restore normal bandwidth and safe operation quickly. Plan: root-cause analysis, complete removal of malicious code, clean re-checks, and a hardened baseline with accessible recommendations. I’ll verify the latest WordPress version remains, audit the suspicious file, review MySQL/PHP logs, and tune performance where needed to recover expected bandwidth. What is your preferred security plugin and hosting environment so I can tailor the hardening and reporting steps to your stack? Best regards,
$750 USD in 10 days
8.7
8.7

Hi, I have reviewed your brief. A suspicious file dated 05-22-25 with abnormal bandwidth usage is a clear sign of a backdoor or malicious script running inside your installation - this is urgent and I can start immediately. Three quick questions: 1. Do you have FTP and hosting panel access ready to share? 2. Is the site currently live or has your host suspended it? 3. Do you have a recent clean backup before the issue started? Here is what I will deliver: - Full malware scan and removal of every malicious file, script and hidden task - Bandwidth verified back to normal levels - Short written report of what was found and removed - Hardening steps - updated passwords, security plugin setup and server-side rules Ready to start right now. Best regards, Hafiz Anas
$333 USD in 2 days
8.4
8.4

Hi there, ★★★ WordPress Expert ★★★ 7+ Years of Experience ★★★ I can clean your WordPress site and secure it with basic hardening steps. This will include: - Locating and removing all malicious files and scripts. - Verifying normal site functionality and bandwidth levels. - Providing a report on findings and corrections made. - Recommending and implementing basic security measures. I will handle this with a structured approach, ensuring all vulnerabilities are addressed and the site is secured effectively. Ready to start once you provide access to the site. Thanks!
$300 USD in 1 day
8.3
8.3

Hello, I'm a web developer with over 13 years of experience. I've reviewed your project and am confident I can assist you. I have knowledge in PHP, Web Security, PHP, Web Security, WordPress, MySQL, Internet Security Please send me a message to get started. Thank You
$447.82 USD in 1 day
8.1
8.1

Hi, Your WordPress Malware Removal & Hardening is the kind of project where most businesses leave money on the table. I've spent years helping United States brands get found through SEO and internet marketing. What I've done: - SEO strategy & technical optimization - Keyword research & content planning - Link building & authority development - PPC campaigns (Google Ads, social ads) - Email marketing & automation - Social media strategy & management - Conversion rate optimization - Analytics & reporting dashboards - Content marketing & copywriting - Local SEO & citation building My skills: PHP, Web Security, WordPress, MySQL, Internet Security, Web Development, Website Optimization, Performance Tuning + Google Analytics, SEO tools, campaign management, A/B testing, and growth strategy. Quick question before I quote: What's the main goal? (More traffic? Better conversions? Brand awareness? Sales?) Let's do a 20-min call to understand your current situation and what a real strategy looks like for you. What timezone are you in? I respond within 1 hour. Kausar & Team
$350 USD in 3 days
8.4
8.4

Good to see this project, I will locate and remove all malicious files, hidden scripts, and scheduled tasks — then harden the installation so the bandwidth spike does not return. You will receive a clear report of every finding and fix. That suspicious file dated 05-22-25 is worth examining first, but I will also check wp-cron for injected scheduled events and scan uploads and mu-plugins directories — common hiding spots that surface scans miss. Attackers often plant a secondary backdoor outside the theme, so a full sweep matters more than removing the obvious file alone. Questions: 1) Do you have SSH or only cPanel/FTP access to the server? 2) Is there a staging or backup copy, or should I work directly on the live installation? Send me a message and we can go over the details. Best regards, Kamran
$280 USD in 10 days
8.4
8.4

Experienced in WordPress security and malware removal, I understand the urgency of your situation. With your site burning through bandwidth due to suspected malicious activities, my skills in malware detection and removal, coupled with hardening measures, can swiftly restore your site's integrity. Could you share access details to initiate a comprehensive scan and removal process effectively? Regards, Yogesh Kumar
$420 USD in 10 days
8.4
8.4

Having been in the web development industry for several years, I have encountered numerous WordPress-related issues, particularly malware attacks. I'm confident I can quickly identify any malicious files, scripts or hidden tasks and efficiently remove them from your website. My expertise in MySQL, PHP, Web Development, and Web Security enables me to not only locate and eradicate malware but also to strengthen your site's defenses against future attacks. Furthermore, my WordPress skill set is highly compatible with your project requirements. I'm experienced in developing and customizing WordPress themes and plugins, including security-focused plugins like WPForms and Yoast SEO. I am used to working with server-side settings and can recommend the best rules to harden your site against potential vulnerabilities identified during the cleaning process. Let me assure you that I will leave no stone unturned until your site is secure and performing optimally. Not only will I provide a comprehensive report on what I found and removed, but I will go an extra mile by recommending additional security measures including modernizing your passwords. After delivering a clean, secure baseline for your website, I am happy to assist you as an ongoing consultant or with any other projects you might have in mind. Let's begin securing your WordPress site now!
$250 USD in 2 days
8.1
8.1

As your site has fallen victim to malware, it is crucial to choose a freelancer who not only specializes in the required WordPress Malware Removal & Hardening, but also maintains high-security standards as a core of their web design philosophy – I am that person. With your site being on the latest version of WordPress, I understand the importance of a thorough and efficient cleanup that will locate and remove every malicious element, including the suspicious file identified by your host on 05-22-25. My proficiency with PHP grants me the ability to ensure dynamic functionality and code robust security measures into your site once cleaned up. Moreover, my experience working extensively with the Shopify platform has honed my understanding of eCommerce and the need for rock-solid security in online operations. Lastly, my commitment to delivering not just clean codes but clean sites has always been appreciated by my clients, resulting in repeat clientele. So, if you seek an expert who follows high coding standards, is adept at hardening even the most vulnerable of sites, and values customer satisfaction above all else, I believe we would make an excellent team for this project. Choose me and let's restore your site to its safe baseline quickly.
$250 USD in 4 days
7.9
7.9

Hi, I can clean your WordPress site, remove the malicious files or hidden scripts causing the bandwidth spike, and secure the installation so the issue does not return. I’ll inspect the suspicious file, scan the theme, plugins, uploads, database, cron jobs, and server rules, then remove anything unsafe carefully without breaking the site. After cleanup, I’ll test the site, apply basic hardening, and provide a clear report of what was found and fixed. Best regards, Ranjika.
$250 USD in 7 days
7.7
7.7

Hi, I have strong experience with Php, Laravel and Code ignitor. I’ll develop robust and secure web application just the way you want. I can handle any updates you need. You can check my reviews to see the quality of my work, I will share my previous application in private chat. Lets connect in chat so that We discuss further. With Regards, Sai
$360 USD in 10 days
7.8
7.8

Hi there, We’ve tackled similar urgent issues with WordPress sites before, where malware was causing excessive bandwidth usage. In one case, we found a malicious script that was sending spam emails, leading to a server blacklist. We quickly removed the malware and implemented robust security measures to prevent future attacks. For your project, I’ll start with a thorough investigation to identify and eliminate all malicious files and scripts. I’ll also ensure that your site is fully updated and optimized for performance. After cleaning, I’ll implement essential security measures, such as strong passwords and security plugins, to safeguard against future threats. Let’s schedule a quick 10-minute call to discuss your project in more detail and ensure I fully understand your needs. Best regards, Adil
$366.67 USD in 7 days
7.5
7.5

Hi! I can help you with cleaning up your WordPress site and locking it down. That suspicious file from May 22nd is a good starting point but there's likely more hidden in the database or tucked into plugin folders. I'd do a full scan, clean everything out, verify your bandwidth drops back to normal, and then harden the whole setup with proper security plugins, fresh credentials, and server-side rules. You'll get a clear report of what was found and what got fixed. I'm Edward, 10+ years with WordPress and I've cleaned up plenty of compromised sites. Let me know if you want to get started.
$880 USD in 7 days
7.6
7.6

Hi, I can fully clean your WordPress site by finding malicious files, hidden scripts, and suspicious tasks causing bandwidth spikes. I’ll restore normal loading, verify the issue is resolved, and harden the site with password updates, security plugin setup, and server-side protections to prevent repeat infections. Let's discuss in chat.
$250 USD in 7 days
7.1
7.1

I can do it in $99. Please send me a message and we can discuss further.. I have been cleaning wordpress infections since last 15 years and I can definitely help you with this.
$250 USD in 1 day
7.1
7.1

I can quickly audit and clean your WordPress installation by locating malicious files, hidden scripts, cron jobs, and bandwidth abuse sources, then fully harden the site to prevent reinfection. I’ll restore normal performance, secure vulnerable areas, implement basic protection measures, and provide a concise report explaining what was found and fixed. Best regards Ihtsham
$650 USD in 1 day
7.1
7.1

Hello. I will run security audit on your WordPress website and will clean it up and make sure this doesn't happen in the future. I recently cleaned up 2 WordPress malware infected websites and ready to do the same for you and harden the security of your website. Ready to start work right away. Best regards. Hassan
$250 USD in 2 days
7.2
7.2

As a seasoned developer with deep expertise in PHP and MySQL, I have successfully tackled numerous projects involving WordPress site security, performance optimization and malware removal. One such instance comes to mind when I helped a client whose site was suffering from similar symptoms as yours. Through a methodical approach involving thorough file inspection, database query analysis and security plugin implementation, I was able to eliminate all malicious elements and restore the site to its original, secure state. Furthermore, I provided the client with a detailed report of what had happened and steps taken to prevent any future infections.
$250 USD in 2 days
7.1
7.1

Charleston, United States
Payment method verified
Member since May 13, 2026
$30-250 AUD
₹600-1500 INR
$250-750 USD
$25-50 USD / hour
₹75000-150000 INR
€30-250 EUR
$30-250 USD
$1500-3000 USD
₹12500-37500 INR
₹600-1500 INR
$30-250 AUD
₹600-1500 INR
₹12500-37500 INR
$30-60 USD
£20-250 GBP
$15-25 USD / hour
$1500-3000 USD
₹400-750 INR / hour
₹750-1250 INR / hour
$10-30 USD