I will remove malware, fix hacked wordpress site and remove google blacklist


About this gig
Is your WordPress site redirecting to spam, showing the red "Deceptive Site Ahead" screen, or suspended by your host?
Don't panic. Your data is safe.
I specialize in WordPress security engineering and manual malware forensics. Unlike automated plugins that miss disguised shell scripts, I execute low-level inspections across your server directories, core files, and database to eliminate payloads and permanently block reinfection.
What This Gig Covers:
- Complete Malware Cleanup: Remove PHP shells, eval/base64 code, cron backdoors, and database SQL injections.
- Redirect & SEO Spam Fix: Strip Japanese keyword spam, pharma hacks, and rogue redirect links.
- Blacklist Removal: Clear warnings on Google Safe Browsing, McAfee, and Wordfence.
- Host Account Reactivation: Clean infected directories to lift cPanel/server suspensions.
- Core & Database Repair: Restore clean files and flush unauthorized admin accounts with zero data loss.
- Security Hardening: Deploy WAF rules, disable PHP execution in uploads, block XML-RPC, and lock down file editing.
Have multiple sites on one cPanel? Message me first to review scope. Clean site or 100% refund.
Respect third-party rights
Please be aware that it is against Fiverr's policies for sellers to include themes, templates, or any other elements that infringe third-party rights or applicable laws in the delivered work. Read more about in our Guide to Responsible Digital Creation.
Get to know Jahid Shah
WordPress Security Expert, Developer and Research Specialist
- FromBangladesh
- Member sinceJul 2017
- Avg. response time1 hour
Languages
Bengali, English
My Portfolio
FAQ
Can you fix my site if my hosting account has been suspended?
Yes. I will need temporary cPanel, FTP, or server credentials. I will manually clean the malicious files across the directories, remove cron jobs and backdoors, and provide a clean audit report so your host can lift the suspension immediately.
Will removing the malware break my site design, content, or layout?
No. Before touching a single line of code, I take a full server-side backup of your files and database. The cleanup targets only injected malicious strings and infected scripts; your pages, posts, theme customizer settings, and products will remain intact.
How long does Google blacklist removal take?
The malicious files are eradicated within a few hours. Once clean, I immediately submit a formal review request through Google Search Console. Google typically clears the "Deceptive site ahead" red warning banner within 6 to 24 hours of receiving the clean request.
What is the Japanese keyword hack, and can you fix it?
It injects spam URLs into Google search results. I remove the malicious generation scripts, clear rogue sitemaps, patch the entry point, and set 410 headers so search engines quickly de-index the spam.
Why do backdoors keep returning, and how do you stop reinfection?
Automated scanners miss hidden PHP shell scripts inside upload folders or database tables. I manually trace and wipe the root backdoors, update vulnerable components, and apply strict server-level rules.
What if I have multiple infected websites under one cPanel account?
Shared cPanel directories let malware spread between sites. Leaving one infected causes immediate reinfection. Message me with your site count before ordering for a custom package to clean them all.
