Hello.
I need a consultation or service from a specialist to increase the level of security and remove "treatment" from viruses on WordPress sites.
I will say right away that the budget is approximate; if the service costs more, but the guarantee and quality are 100%, I am ready to discuss the price and create, for example, an individual task.
On the hosting account (HostPro), there are three sites. All three are currently infected with viruses.
Files are being created in many folders, such as: worksec.php
After the appearance of this file, the file: index.php is most often changed.
Also, the permissions of this file change from 644 to 444
Problems also arise in the files:
wp-theme.php
wp-editor.php
dex.php
etc.
What has already been done:
- changed the login passwords for all accounts
- changed the login password for DirectAdmin
- scanned the site with the Wordfence Security plugin and found various files with critical content, for example:
wp-theme.php
- Filename: /home/zitysjxb/domains/jlady.kyiv.ua/public_html/wp-theme.php
- File Type: Not a core, theme, or plugin file from wordpress.org
- Details: This file appears to be installed or modified by a hacker to perform malicious activity. If you know about this file you can choose to ignore it to exclude it from future scans. The matched text in this file is: <?php error_reporting(0);$
- also on the server (HostPro) files were scanned with the ImunifyAV Plugin antivirus, which occasionally (once a week) detects infected files and shows them.
I delete some files manually, and I try to clean some, however, the problem reoccurs.
Additionally, I am attaching screenshots of the problems.
As a result, 250,000 pages appeared in GSC with redirects, all 404; at one point, the site even did not open and showed some error 5...
If more data is needed, I am ready to provide it.
I am interested in your qualifications regarding the treatment of the site, timelines, costs, and the possibility of preserving files and data.
