[ad_1]
I am wondering how I can remove malware and have a fully functional website again. I downloaded Sucuri & Wordfence (free versions) and looking into premium options to fix these issues. What happens now is when I type website into browser and launch it, a redirect happens to unknown websites. The scans show a bunch of files with malicious code. What works for you guys ? Thanks for your help
[ad_2]
If you have a backup, use that. As you’re asking, your skill set is probably insufficient. No offence intended. Consider posting a job:
[https://jobs.wordpress.net/](https://jobs.wordpress.net/)
You can use services such as Sucuri or MalCare, both of which offer malware removal services.
Sucuri is great, and they work quickly.
MAKE A BACK UP BEFORE YOU BEGIN
– Update all plugins, remove all unknown and unused plugins.
– Update WordPress to the latest version.
– Download the latest version of WordPress to your computer. Upload all the folders wp-admin and wp-includes overwriting the existing files. DO NOT upload the wp-content folder to your WordPress folder. IMPORTANT – DO NOT replace the wp-content folder!
– You need to manually check all files in the WordPress folder that are not in either of the 3 wp- folders.
– Reset the database password.
– Remove all unknown users and reset all passwords.
Install something like Wordfence and do a deep scan.
It might be the Malware is on your Hosting not on your website, Do you try to change the hosting?
Last malware project I worked on required two WP security plugins and an additional server security feature to fully remove.
Plus reinstalling WP core files.
One option might not get it all.
I’ve used Sucuri on two projects before. They are great, and the cost was well worth what I would have spent in my time.
Install [GOTMLS](https://wordpress.org/plugins/gotmls/) update definitions and run a full root scan. This will scan and clean inside files and nothing quite works as well as this imho.