
Completed
Posted
Paid on delivery
Website flagged for malware. We need an immediate fix today and a permanent solution going forward. A week ago, the following was done: WHAT WAS FOUND LAST WEEK: - 30 spam blog posts (casino/gambling content in multiple languages - Russian, German, Swedish, English) were published on the site between March 2025 and February 2026 - These were all published through the single admin account. The password was likely compromised or brute-forced, which is how the attacker got in - The Blog page was showing spam because it listed these posts - No Googlebot cloaking detected (some malware shows different content to Google vs real users - this site doesn't have that) - No malicious JavaScript injections found - No backdoor files or hidden admin accounts found - The 4 pages Google flagged (car batteries, diagnostics, about us) were false positives - they contain the word "specialist" which Google's scanner partially matched against pharmacy spam keywords WHAT WAS CLEANED: 1. Deleted all 30 spam blog posts (permanently, not just trashed) 2. Deleted an orphaned "Lorem Ipsum" draft post 3. Activated the Activity Log plugin (was installed but inactive) - this will track who does what going forward 4. Verified the blog page, all service pages, and homepage are completely clean 5. Verified no cloaking - Googlebot sees the same clean site as regular visitors PLUGIN UPDATES (all 16 done): - Advanced Custom Fields 6.7.1 -> 6.8.0 - All-in-One WP Migration 7.103 -> 7.105 - WebP Converter 6.5.4 -> 6.5.5 - Current Year Shortcode -> 2.5 - Duplicate Page -> 4.5.7 - Elementor 3.35.8 -> 4.0.2 - Elementor Pro (already latest) - JetEngine -> 3.8.8 - Jetpack Protect -> 5.0.0 - Limit Login Attempts -> 3.1.0 - ManageWP Worker -> 4.9.33 - Really Simple SSL -> 9.5.9 - Insert Headers and Footers -> 2.3.5 - WPForms -> 1.10.0.4 - WP Headers and Footers -> 3.1.4 - Yoast SEO -> 27.4 SECURITY HARDENING: - Added security headers (X-Frame-Options, X-Content-Type-Options, X-XSS-Protection, Referrer-Policy) - all verified working - Disabled file editing in wp-admin (prevents hackers from editing theme/plugin files if they get in) - Hidden WordPress version number from page source - Blocked user enumeration (author archive redirects) - XMLRPC was already blocked by the hosting (good) - Activated Activity Log plugin to track future admin activity FULL SUMMARY OF ALL WORK DONE: 1. Deleted 30 spam blog posts (casino/gambling content) 2. Updated all 16 plugins to latest versions 3. Added security hardening snippet with headers and protections 4. Verified site is clean (no spam, no cloaking, no backdoors) 5. Admin password changed
Project ID: 40387972
90 proposals
Remote project
Active 27 days ago
Set your budget and timeframe
Get paid for your work
Outline your proposal
It's free to sign up and bid on jobs
90 freelancers are bidding on average $34 USD for this job

Hello Sir, I will clean and secure your website guaranteed. Let we discuss more so that I can explain you what I follow to scan step by step. I am ready to start right now. Thanks
$88 USD in 3 days
7.2
7.2

Hi, I will fix your malware and security issues immediately. I will remove all malicious content and implement the permanent security hardening measures needed to protect your site today. You can check my portfolio here: https://www.freelancer.com/u/tanveerk0956 Thanks, Saeed
$20 USD in 1 day
6.4
6.4

Hi! My name is Marjan and I'm here to offer you my services as a skilled applicant with over a decade of experience working on Freelancer.com. l believe I am the best fit candidate for this project due to my extensive experience; I would like to have a discussion to get to know that we both are on the same page. Once the scope will be locked, I will start working on it right away.
$200 USD in 7 days
6.5
6.5

Hello there, I am available to begin working on your project right away. The task is straightforward, and I recently completed a similar project with excellent results. I can ensure fast, accurate, and high-quality delivery. I would welcome the opportunity to collaborate with you and contribute to your project’s success. Thank you for considering my proposal, I look forward to your response. Thank you.
$20 USD in 1 day
6.1
6.1

I can immediately perform a full security audit to identify any hidden vulnerabilities, strengthen WordPress hardening (including firewall, login protection, and file integrity checks), and ensure no residual malware or reinfection vectors remain. I will also implement a permanent security setup with monitoring, backups, and prevention measures so your site stays clean and protected going forward. Best Regards, Muhammad
$20 USD in 1 day
6.1
6.1

Hello, I can fully secure your WordPress site after the malware incident. I will run a deep scan of core files, themes, plugins, uploads, database, and cron jobs to ensure no backdoors or reinfection risks remain. I will verify admin users, login activity, wp-config and htaccess integrity, and check for malicious redirects or injections. I will strengthen security by hardening login protection, file permissions, and disabling vulnerable endpoints like XMLRPC if needed. Finally, I will provide a clear report confirming the site is clean, secure, and protected going forward, with recommendations for long-term safety without affecting performance. With 8+ years experience, I can deliver quality work. I’d love to discuss and get started soon. Thanks & Regards Sushma S.
$59 USD in 3 days
6.2
6.2

With your website's security compromised, trusting an experienced hand to handle your malware remediation and website security is paramount. With over a decade of experience as a Web Engineer, I have honed a skill set perfectly suited for the task ahead. I understand and have rectified every aspect of the malware issue you've described in my career. For your immediate fix, I will uncover the source of the brute-force and close that security gap. In line with your desire for permanent solutions, I will further reinforce your website's defense with additional standard of security hardening actions such as disabling file editing in wp-admin, blocking user enumeration, and hiding WordPress version number in the page source to name just few. In addition to protection measures, I am highly skilled in carrying out the necessary plugin updates and conducting CMS-wide security checks. My past experiences also help me guide clients on future-proofing their online investments against similar threats. With me onboard, not only will your immediate issues be resolved, but you'll also receive long-term support in terms of stability and continued improvement upon your website's security status. Let's work together to ensure that the integrity of your site remains intact going forward.
$10 USD in 1 day
5.7
5.7

Hello, I came across your project Malware Remediation and Website Security and I am very interested in working with you. I have reviewed your requirements and fully understand the scope and expectations. I specialize in Web Security, WordPress, Website Testing, Website Management, Internet Security, Penetration Testing, Web Development, Website Optimization and have successfully delivered similar projects before. I am committed to delivering high-quality work with reliability, clarity, and professionalism. I work transparently throughout the project so progress, deadlines, and expectations stay clear at every stage. I would be glad to discuss further details and am ready to start immediately. Looking forward to hearing from you. Regards, Anum
$50 USD in 3 days
5.6
5.6

Hi, I am Wordpress,PHP programmer having 10 years of experience. I am very good in wordpress,php,mysql,joomla.
$30 USD in 1 day
5.9
5.9

✅ Fixed Price $55.00 ✅ Check my recent related work: https://www.freelancer.com/portfolio-items/11346951-naxsg-ecommerce-recovery-and-seo Your site looks “clean” on surface but this kind of attack usually leaves hidden access points. I’ll go deeper, lock every entry point, and make sure this doesn’t happen again. I have 5+ years of experience in WordPress security, handling reinfection cases, and fixing compromised sites where initial cleanup missed deeper vulnerabilities. I’ll run a full file/database audit beyond visible issues, check for hidden backdoors or scheduled tasks, secure admin access (2FA, login hardening), implement firewall + monitoring, and ensure your site passes all security scans with zero reinfection risk. Do you want me to audit hosting/server level security as well? Is Cloudflare or any firewall already active? Let’s connect in chat, I’m ready to start now. Regards, Ashar K. Replies Within few Seconds
$10 USD in 1 day
4.7
4.7

malware on wordpress is usually a backdoor left by a compromised plugin or a nulled theme. i can scan, clean, and get your site off the flagged list today. for the long-term fix ill harden the wp-admin access, block suspicious file execution, and set up monitoring so you get alerted if anything tries to creep back in. can start right now, just send me the site url.
$30 USD in 1 day
4.3
4.3

Respected Sir, I hope you are doing well. I can start working on your project right away and ensure quick and professional completion. Delivering quality work on time is always my priority. You can view my portfolio here: ? https://www.freelancer.pk/u/It19muhammadham2 I am a skilled WordPress and Shopify expert with strong experience in handling quick tasks as well as full website builds. WordPress and Shopify are my specialties, and I am confident I can provide the results you need. I’m ready to get started immediately and look forward to working with you. Best regards, Hamza
$30 USD in 1 day
3.9
3.9

Hey, I understand that your website has been flagged for malware and you require immediate remediation along with a long-term security solution. Based on the detailed information provided, it seems that the site was compromised through compromised admin credentials and spam blog posts were published. My approach would involve thorough malware removal, plugin updates, security hardening, and continuous monitoring to prevent future attacks. With my proficiency in WordPress, Web Development, Website Management, and Website Optimization, I am well-equipped to handle the complexities of this project. I have experience in cleaning malware-infected websites, updating plugins, implementing security measures, and ensuring website integrity. Best Regards, Sana
$30 USD in 7 days
4.0
4.0

Hi there! You already cleaned visible spam but the real challenge is finding the hidden entry point that allowed admin access and making sure reinfection is impossible. I recently handled a similar WordPress compromise where spam posts kept returning until I traced the root cause to weak auth vectors and residual access points, then fully locked it down with zero reinfections after deployment. I also implemented monitoring that caught anomalies before damage spread. I will perform a deep audit of users, database, cron jobs, and file integrity, then harden authentication, enforce access controls, and set up ongoing monitoring so this cannot happen again. Check our work: https://www.freelancer.com/u/ayesha86664 Do you currently have any external integrations or API keys connected that could have exposed access indirectly? I am ready to start just say the word. Best Regards, Ayesha
$15 USD in 7 days
4.0
4.0

In your quest for a competent, reliable and trustworthy freelancer to handle your malware remediation and website security project, look no further than me, Shehroz. Although my primary skill sets frontier in website development (PHP, Node.js, React and Python) and automation, my experience in WordPress management runs deep. With the ability to navigate through complex codes and systems efficiently, I can guarantee the permanent security fix you require while ensuring consistent future protection. I can start working on it right now
$15 USD in 1 day
4.1
4.1

Hi there, I understand the urgency of your project regarding malware remediation and website security. I can provide an immediate fix for the current issues and implement a long-term solution to prevent future attacks. Here's what I'll deliver: - Removal of 30 spam blog posts and an orphaned draft post - Update of all 16 plugins to their latest versions - Implementation of security hardening measures to protect your website My approach ensures a clean and secure website, free from spam and vulnerabilities. Let's discuss further on freelancer.com. Please review my profile below. Best regards, Abdul Moeed
$10 USD in 1 day
4.1
4.1

Hi, I’m Ben Jackson from Jetjams Technologies. We can help with an immediate malware review and permanent WordPress security fix for your website today. What we will do: * Re-check the full website for any remaining malware or hidden issues * Review admin access, login security, and attack entry points * Inspect theme, plugins, database, and core files * Harden WordPress security for long-term protection * Review Google flagging issue and help with next cleanup steps * Make sure the site stays clean without affecting SEO or functionality What stands out from your case: * Spam posts were likely caused by admin account compromise * Plugin updates and cleanup were a good first step * Now the key is to confirm there is no persistence left and close future attack paths We understand you need someone who can act fast, work carefully, and secure the site properly instead of only doing a temporary cleanup. Best reasonable price: $180 USD We are ready to start immediately and secure your website properly. We are so much grateful to serve you.
$180 USD in 7 days
3.7
3.7

I can help you complete this quickly and cleanly by building on the work already done, including the deletion of 30 spam blog posts and the update of 16 plugins to their latest versions, such as Advanced Custom Fields and Elementor, to ensure your WordPress website remains secure and malware-free, with the expected outcome being a stable and tested solution that prevents future compromises, including the addition of security headers and protections, and I can start right away and deliver a stabl
$20 USD in 7 days
4.1
4.1

Hi You are looking for an expert to immediately secure your WordPress site, verify the cleanup, and implement a permanent protection strategy after the recent malware/spam incident. Here is my plan I will start with a deep forensic scan beyond the previous cleanup—checking database entries, scheduled tasks (cron), hidden payloads, and integrity of core/theme/plugin files to ensure no dormant backdoors remain. Then, I will harden authentication (2FA, reCAPTCHA, IP rules), enforce strict file permissions, and secure wp-config, database access, and admin endpoints. I will also configure a robust firewall (Wordfence/Cloudflare WAF), enable login anomaly detection, and ensure continuous monitoring with real-time alerts. Finally, I will validate Google Search Console status, request reindexing if needed, and confirm the site remains clean under multiple scanners. To proceed kindly let me know the following Do you currently have server-level access (cPanel/SSH) for deeper log inspection? Is Cloudflare or any CDN/WAF already in place? Would you like daily automated offsite backups added as part of the long-term solution? I do have more than 7 years of experience and would be glad to help you in fully securing your site and preventing future breaches. I am available to start immediately—let’s connect and lock this down today. Thank you
$20 USD in 7 days
3.6
3.6

Hello, Cleaning up spam posts is only step one—what matters now is closing the entry point and making sure this doesn’t happen again, especially if the admin account was compromised. I’ll run a full security audit beyond surface checks: scan core files and database for hidden payloads, verify user roles and login logs, and trace how those posts were injected. Then I’ll lock down authentication (2FA, login hardening), secure wp-config and file permissions, and implement a firewall + malware monitoring so any future attempt is blocked in real time. 1. Do you have access to server logs (cPanel/hosting) so we can trace the exact login source or IP used? 2. Was the admin account using a strong unique password, or shared across tools/services? I can start immediately and stabilize this today. Best, Subham
$25 USD in 1 day
3.2
3.2

Durango, United States
Payment method verified
Member since Mar 7, 2024
$30-250 USD
$20-60 USD
$30-250 AUD
$30-60 USD
£10-20 GBP
$10-30 USD
₹750-1250 INR / hour
$15-25 AUD / hour
$2-8 USD / hour
$30-250 USD
€6-12 EUR / hour
$10-30 USD
₹600-1500 INR
$250-750 USD
$30-250 USD
₹12500-37500 INR
₹600-1500 INR
$30-250 USD
$15-25 USD / hour
$30-250 USD
$30-250 CAD
$30-250 USD