
Closed
Posted
Paid on delivery
My VPS hosts a little over twenty WordPress installations and the whole server is now riddled with spam links and other malware. Even though a firewall, ClamAV-based antivirus, and routine security monitoring are already in place, the intrusion has spread across every site. What I need first is a thorough, manual cleanup of each WordPress instance—core files, themes, plugins, and database tables—so the sites can return to normal operation without breaking functionality. I do have backups, but I suspect they carry the same infection, so please factor that in when you plan your approach. If, during your audit, you find that a clean-in-place strategy isn’t realistic, I’m open to spinning up a brand-new server and migrating only verified-clean data. Guidance on the safest migration workflow will be appreciated. Deliverables • Detailed scan and removal of all malicious code, spam content, backdoors, and rogue cron jobs across ~20 sites • Post-cleanup report listing every file and database change, plus the root cause you identify • Hardening steps applied (wp-config keys, file permissions, updated plugins, Web Application Firewall rules, fail2ban tweaks, etc.) • Recommendations on using or discarding my current backups and, if needed, a phased migration plan to a fresh VPS Acceptance Criteria – All sites load without malware warnings from Google Safe Browsing or security scanners – No suspicious outbound traffic or reinfections observed after 48-hour monitoring – Clear documentation so I can maintain the environment going forward Please outline the tools and methods you’d use (e.g., WP-CLI, ImunifyAV, custom scripts) and an estimated timeline for the full cycle from audit through final sign-off.
Project ID: 40189951
224 proposals
Remote project
Active 4 mos ago
Set your budget and timeframe
Get paid for your work
Outline your proposal
It's free to sign up and bid on jobs
224 freelancers are bidding on average $444 USD for this job

Hello, I can help clean and secure all your WordPress sites by manually removing infections, repairing affected files, and applying strong hardening measures. I’ll ensure full functionality is preserved and provide a clear report for future maintenance. I need to share a few samples from my portfolio with you. Are you available for a quick chat?
$450 USD in 7 days
9.3
9.3

Hello, I hope you're doing well. I understand the urgency of getting your WordPress sites cleaned and secured. I can assist you with a comprehensive manual cleanup of each WordPress installation, ensuring that your sites are free from malware while maintaining their functionality. My approach will include a detailed audit, thorough removal of malicious elements, and hardening of your server to prevent future attacks. To tailor my strategy effectively, could you share if there are any specific plugins or themes you prioritize keeping? What is your preferred timeline for the cleanup and hardening process? Lastly, are there any specific security measures or tools you’ve found effective in the past that you’d like incorporated? I will provide a post-cleanup report detailing all actions taken and offer guidance on whether a new server migration is necessary. Your backups will be carefully evaluated to ensure they are safe to use. Looking forward to helping you secure your sites efficiently. Best, Azeem Amin
$550 USD in 7 days
8.9
8.9

Hello, As a well-established web service provider with a wealth of experience in WordPress, my team and I are uniquely positioned to efficiently address your WordPress VPS malware issue. We understand that even with good precautions in place, little pests can find their way onto the server, spreading mayhem across all sites. Our strategy entails a meticulous manual scan and removal process, which includes core files, themes, plugins, and database tables to ensure the elimination of the malware without disrupting any functionality. Additionally, we will provide you with detailed documentation that lists each file and database change made during the cleanup process along with their root cause. In terms of hardening your site's security post-cleanup, we will employ various measures such as wp-config keys, file permissions management, updated plugins installation, Web Application Firewall (WAF) rules implementation and certain tweaks on Fail2Ban. These measures will assist in safeguarding your server against future attacks. Concerning your backups, we recommend scrutinizing each one well before deploying them again as it's probable that they already bear traces of the infections. However, if deemed necessary after the full scanning process and careful consideration of the backups situation, we can discuss executing a phased migration plan to a fresh VPS. By choosing us for this project, you're not only selecting a team with solid ski Thanks!
$350 USD in 3 days
8.3
8.3

With my background in Linux, VPS, web security and WordPress, I understand the intricacies of your project in and out. Over the years, I've honed my skills on these platforms through my vast experience in e-commerce,set-up, website development, and cyber-security; a proficiency that is very much relevant for your current needs. To tackle your malware issue, I plan to conduct a meticulous scan and manual clean up of each WordPress instance- core files, themes, plugins and database. Should it be necessary, I am also equipped to deploy a new server and carry out a safe data migration intuiting potential issues you've insightfully raised about the possibility of infected backups. I'll apply hardening measures such as wp-config keys, file permission updates plugins etc., to arm your system as best possible against future attacks. Furtherstill,fail2ban tweaks will be employed to create multiple layer security approach once the cleaning is done .
$500 USD in 7 days
8.4
8.4

Hi, I handle large-scale WordPress malware cleanups on compromised VPS setups. I will manually audit files, databases cron jobs and backdoors across all sites, identify reinfection sources and harden the server. If needed I can plan a clean migration. Ready to start now. Hafiz S.
$250 USD in 2 days
8.0
8.0

Hello, I can easily remove malware, unwanted codes, and miscellaneous links from your website and server. I will also set up security for the future. I have 10+ years of experience in Malware/virus removal from the website. I have a number of actionable steps that can take to improve your WordPress website security. WordPress Security in Easy Steps (No Coding) Install a WordPress Backup Solution Best WordPress Security Plugin Enable Web Application Firewall (WAF) WordPress Security for DIY Users Change the Default “admin” username Disable File Editing Disable PHP File Execution Limit Login Attempts Change WordPress Database Prefix Password Protect WP-Admin and Login Disable Directory Indexing and Browsing Disable XML-RPC in WordPress Automatically log out Idle Users Add Security Questions to WordPress Login Fixing a Hacked WordPress Site The Bid amount is subject to change and will be finalized after a complete project discussion. Let’s discuss in chat as I have some queries to ask regarding the project to proceed further. Regards, Smile Mittal
$250 USD in 7 days
8.0
8.0

As a seasoned developer and leader of a dedicated team, my previous experience addressing malware attacks on WordPress installations makes me well-suited for the problem at hand. Our strategy will involve a thorough scan and removal of all malicious code from your approximately twenty websites, leaving no stone unturned. In line with your concerns about backups carrying infections, we'll be meticulous when migrating data, or proceed with a clean-in-place approach when viable. Let’s chat and have a discussion, and prepare the project scope so that both of us are on the same page Regards, Rupam
$400 USD in 5 days
8.2
8.2

Hello, I came across your project and found it truly interesting. With over eight years of hands-on experience in this field, I have successfully delivered high-quality solutions to clients worldwide. My dedication to excellence is reflected in the 180+ positive reviews from satisfied clients. I’d love to bring this expertise to your project and ensure outstanding results. However, I do have a few important points I’d like to clarify to align perfectly with your vision. Let’s connect via chat, where I can also share relevant examples of my past work. I'm looking forward to hearing back from you! Best Regards, Divu.
$750 USD in 8 days
7.7
7.7

Hello, I will remove all malware from all your Websites, fix redirection issues, Clean your infected files in database as well, will make sure all fixed fine + will install paid solid security plugin too. I can start it right now. Waiting for your message! Looking forward to working with You! Thanks Faheem
$750 USD in 20 days
7.8
7.8

Hello, I’m Muhammad Awais. I will perform a thorough, manual cleanup of all 20 WordPress sites on your VPS, removing malware, rogue content, backdoors, and compromised cron jobs, then tighten security to prevent reinfection. I’ll review core files, themes, plugins, and databases, and decide whether a clean-in-place remediation is feasible or a fresh VPS migration is safer. Backups will be assessed for malware before any restore. Deliverables include a detailed scan/removal report with every file and DB change, root-cause findings, hardened settings (wp-config keys, strict permissions, updated plugins, WAF rules, fail2ban tweaks), and a practical migration plan if needed. Tools will include WP-CLI, ImunifyAV, and custom scripts; I’ll provide a phased timeline and a post-cleanup checklist to keep you secure and informed. The results should be GPT5 not 3.5. Should I start with a full clean-in-place cleanup across all sites, or move to a fresh VPS migration if any site can't be cleaned safely? Are backups trusted, and should I assume backups may be infected and avoid restoring from them unless verified? Do you have any specific hardening standards (e.g., PHP version, WP version, WAF, file permissions) you want me to enforce? What downtime window is acceptable for the audit and for the migration if required, and do you want a rollback plan? Do you want a phased migration plan with milestones and a verification checklist (Google Safe Browsing status, 48-hour reinfection monitor
$750 USD in 25 days
7.7
7.7

Hi Michael, To address the WordPress VPS malware cleanup and hardening project, I will conduct a thorough manual cleanup of each WordPress instance, removing malicious code, spam content, backdoors, and rogue cron jobs. I will provide detailed post-cleanup reports, apply hardening steps, and offer guidance on backups and migration if necessary. Let's discuss further to plan the approach. Regards, Sai Bhaskar
$420 USD in 10 days
7.7
7.7

With a depth of experience in Linux, MySQL, Troubleshooting, Web Security, and WordPress, I have the skill set required to tackle your malware crisis head-on. Firstly, I understand that your priority is to get your twenty WordPress installations back up and running smoothly while ensuring comprehensive security. I am confident in offering a manual cleanup strategy, which involves thorough scans of core files, themes, plugins, and database tables. Incorporating my expertise with WP-CLI and ImunifyAV to mitigate cyber threats effectively. Moreover, I will strictly adhere to best practices for hardening your sites against future attacks. This includes implementing wp-config keys, updating plugins as needed alongside pertinent file permissions, and fine-tuning Web Application Firewall rules. To add an extra layer of protection, failed login attempts will be monitored with fail2ban tweaks lest we fall prey to avoidable breaches. Being attuned to preserving your data integrity, I'll conduct meticulous audits of existing backups before suggesting their utilization or disposal. Where needed prudent phased migration plan to a fresh VPS will be recommended. As an assurance of my commitment and professional duty towards you Every step will be documented transparently. Let my experience and dedication guard your virtual world against any invading malware!
$300 USD in 3 days
7.5
7.5

Hi, I see your VPS hosting 20+ WordPress sites is severely compromised despite existing protections—a challenging but solvable issue. With over 7 years managing WordPress security and MySQL databases on VPS environments, I specialize in meticulous manual malware cleanup that respects each site's functionality, far beyond automated scans. I'll perform a thorough audit using WP-CLI, ClamAV, ImunifyAV, and custom scripts to uncover hidden backdoors, rogue cron jobs, and rogue outbound traffic. If clean-in-place isn't viable, I will guide a phased migration to a fresh VPS, ensuring only pristine data migrates. Post-cleanup, you'll get a comprehensive report on every file and DB change, root cause analysis, and detailed hardening steps including wp-config key updates, file permission tightening, WAF rules, and fail2ban configuration. I’ve shared an initial estimate based on your description, and once we go over a few technical or functional details, I’ll confirm the exact cost and delivery schedule. Expect completion within 10-14 days from start to final sign-off, including a 48-hour reinfection monitoring period. What current backup system do you use, and have you noticed any patterns in how the infections started or spread among the sites? Best regards, Asad
$250 USD in 10 days
7.6
7.6

As an experienced cybersecurity specialist with a focus in WordPress security, I can deliver a thorough, manual cleanup of your VPS server. My insights into the latest malware and hacking techniques are based on years of experience as a Certified Ethical Hacker and Professional Penetration Tester. Combining this knowledge with my proficiency in working with tools like WP-CLI and ImunifyAV, we can ensure no malicious code, spam content, backdoors, or rogue cron jobs remain. I'll not only clean up your system but also provide a comprehensive post-cleanup report detailing every change made, while offering you root cause analysis to prevent future cases. In addition to cleanup, I specialize in server security hardening which means I can significantly reduce the likelihood of reinfections by deploying measures such as updating plugins, reinforcing wp-config keys, adjusting file permissions and implementing Web Application Firewall rules among others. Moreover, we’ll scrutinize your backups vigilantly and if need be, I’ll guide you through a phased migration plan to a fresh VPS for which I have ample experience performing securely to safeguard against potential threats. To me, the quality of my service is underscored by the clarity of documentation I provide to ensure ease-of-use moving forward and keep you abreast of all the changes made on the site. Choose me today, and I guarantee you'll have sites that load safely and an enhanced security posture
$750 USD in 7 days
7.4
7.4

Dear Greetings, I can perform a full manual cleanup of all WordPress installations on your VPS, including core files, themes, plugins, databases, cron jobs, and server-level backdoors. I’ll audit using WP-CLI, malware signatures, diff-based file checks, and manual DB inspection—without relying on infected backups. If required, I’ll plan and execute a clean migration to a fresh VPS. You’ll receive a detailed cleanup report, hardening actions, root-cause analysis, and 48-hour post-clean monitoring to ensure zero reinfection. Looking forward to working together on this exciting project. Please let me know a convenient time for us to discuss your project in more detail. Best Regards TechOrigine
$250 USD in 20 days
7.4
7.4

Dear Client, I am ready to help you on Immediate basis. I would love to discuss further, ASAP you schedule the interview. I am an experienced Full-Stack website developer, Develop near about 550 websites. I can create custom CRM, Laravel, ERP, Custom Plugin, Wix, WordPress, SquareSpace, Webflow, Shopify, MySQL, JavaScript, HTML, Woo-commerce Integration, jQuery, Third Party API integration, Bug Fixing, Troubleshooting, Malware Cleaning, Site Migration. When can we discuss? Regards
$350 USD in 7 days
7.9
7.9

As an experienced developer with proficiency in a variety of technologies including Linux and MySQL, I am confident that I can provide the comprehensive solution you need to cleanse and harden your WordPress VPS. My knowledge of WordPress's inner workings extends to the core files, themes, plugins, and database tables, allowing for a thorough manual clean-up that leaves no stones unturned. More than just purging the malicious content, however, my approach entails an audit to identify the root cause and prevent reinfection. To ensure your website's safety further, I'll apply an extensive series of hardening steps ranging from wp-config key changes to updated plugins to Web Application Firewall rules—together with fail2ban tweaks—to properly seal the gateways of your installation. In addition to cleaning up your existing WordPress installations, I'm more than adept at migrating data seamlessly and guaranteeing the security of the process. Inexplicably, if we determine it would be best for you to switch servers, I can walk you through a phased migration plan to a fresh environment. My ultimate goal is not only to restore your sites but also to equip you with insightful documentation so that you can maintain them safely going forward. Call on me and let's turn this situation around ASAP! Thanks...
$750 USD in 7 days
7.7
7.7

Thank you for the detailed overview — it aligns well with what I’m looking for. The structured audit-first approach, followed by either a clean-in-place remediation or a verified-clean migration if necessary, makes sense given the scope of the compromise. Your use of WP-CLI, manual file and database inspection, and post-cleanup hardening steps addresses my main concerns around reinfection and long-term stability. The proposed timeline also seems reasonable. Please confirm your availability to start, estimated cost range, and any access or preparatory steps you’ll need from my side before beginning. I look forward to the next steps.
$250 USD in 4 days
7.7
7.7

Dear Srinivas V., I'm writing regarding your 'WordPress VPS Malware Cleanup & Hardening' project. I understand your twenty+ WordPress sites on a VPS are compromised, requiring a comprehensive cleanup, hardening, and a potential migration strategy despite existing security. With extensive experience in server security, WordPress incident response, and malware removal, I specialize in restoring compromised environments and preventing future attacks. My approach will begin with a meticulous audit using tools like WP-CLI, ImunifyAV, and custom scripts to manually remove all malicious code, database entries, and backdoors from each site, including a thorough review of your backups. We'll then implement robust hardening measures (file permissions, WAF rules, fail2ban tweaks). If a clean-in-place isn't realistic, I'll guide a secure migration to a new VPS, ensuring only clean data is transferred. You'll receive a detailed post-cleanup report and ongoing recommendations. I estimate the initial audit and cleanup for ~20 sites will take 5-7 business days, with hardening and monitoring extending shortly thereafter. I'm confident I can restore your sites to full health and security. Let's schedule a brief call to discuss this further. Sincerely, Navneet
$650 USD in 7 days
7.5
7.5

Hi, I will scan complete server and remove all malware and vulnerabilities from server and implement securities on server. I have 10 years of experience in hosting and server work.I will enable 2 way authentication,install firewall and antivirus on server for making it secure.I have 10 years of experience in ssl installation on EC2,aws,linux,vps,dedicated server,windows server. I will start it now only . Please discuss. Thank you.
$250 USD in 1 day
7.5
7.5

San Diego, United States
Payment method verified
Member since Jan 11, 2012
$30-250 USD
$30-250 USD
$250-750 USD
$10-30 USD
$30-250 USD
$3000-5000 USD
$250-750 USD
$250-750 USD
₹600-1500 INR
₹12500-37500 INR
$10-30 USD
£500-1000 GBP
₹1500-12500 INR
$750-1500 USD
$250-750 AUD
$10-30 USD
₹400-750 INR / hour
₹600-2000 INR
₹12500-37500 INR
$30-250 USD
$14-30 NZD
$250-750 USD
£10-20 GBP
₹37500-75000 INR
₹600-1500 INR