Urgent WordPress Malware Removal, Website Recovery and Security Hardening – GoDaddy/cPanel

Upwork Job Title Urgent WordPress Malware Removal, Website Recovery and Security Hardening – GoDaddy/cPanel Job Description We require an experienced WordPress security and malware-removal specialist to recover and secure our e-commerce website: Website: tymobeauty.co.za Hosting: GoDaddy Web Hosting/cPanel Platform: WordPress and WooCommerce The website has been compromised by malware and is displaying a malicious “Yanz Webshell” file-management interface. GoDaddy has confirmed that unauthorised changes were made to the website files and folder permissions. Our priority is to recover the complete website we developed, including its design, pages, products, images, settings and legitimate WooCommerce data, while safely removing all malware and preventing reinfection. This is not simply a request to install a security plugin or delete the visible malicious file. We require a thorough professional cleanup and recovery. Scope of Work The selected specialist must: 1. Create and securely preserve a full backup of the current: Website files WordPress database WooCommerce data Access and error logs 2. Inspect the entire hosting account for: Web shells and backdoors Malicious PHP files Modified WordPress core files Infected themes and plugins Malicious database entries Unauthorised administrator accounts Suspicious cron jobs Modified .htaccess, .user.ini and configuration files Malware located outside the main public_html folder 3. Recover and preserve the existing website: Design and page layouts Elementor or page-builder content, where applicable Products and product images WooCommerce orders and customer data Website settings and legitimate customisations 4. Replace compromised WordPress core files with clean official files. 5. Reinstall plugins and themes from verified clean sources. 6. Carefully inspect and recover any custom theme or child-theme work. 7. Remove all malware, web shells, hidden access points and reinfection mechanisms. 8. Restore secure file and folder permissions. 9. Change or assist us in changing: WordPress security salts Database credentials Administrator passwords FTP/cPanel credentials Other compromised access credentials 10. Secure and harden the website, including: Disabling WordPress file editing Removing unused plugins, themes and accounts Configuring appropriate security controls Setting up reliable off-site backups Adding malware monitoring and firewall protection Protecting the WooCommerce checkout process 11. Test the website fully after recovery: Desktop and mobile display Products and product pages Shopping cart and checkout Forms and emails WordPress administration Website speed and functionality Redirects and suspicious scripts 12. Assist with clearing any Google Search Console, Google Ads or Google Merchant Center security warnings after the website is confirmed clean. Required Experience Applicants must have proven experience with: WordPress malware removal PHP web shells and backdoors GoDaddy Web Hosting and cPanel WooCommerce recovery WordPress database cleaning Website backups and restoration Elementor or similar page builders File-permission repairs WordPress security hardening Google Search Console security reviews Preference will be given to applicants who have handled Yanz Webshell or similar PHP web-shell infections. Important Conditions Do not delete or overwrite the website before creating a complete backup. Do not simply remove the visible web-shell file. Do not restore an unverified or infected backup. Do not remove legitimate WooCommerce orders, products or customer data without approval. All work must be performed carefully to preserve the website that was developed. Website credentials must be handled confidentially. Access will only be provided after the Upwork contract has started. The specialist may not outsource the work without written approval. Deliverables The project will only be considered complete once we receive: A fully recovered and functioning website Confirmation that malware and backdoors have been removed A clean malware scan WordPress core verification results Secure file and folder permissions Fully tested WooCommerce functionality Updated and secured plugins and themes Off-site backup configuration A written report explaining: What malware was found Which files and database entries were affected The likely method of entry, where identifiable What was removed or replaced What security measures were implemented Recommendations to prevent another compromise Screening Questions Please answer the following when applying: 1. How many compromised WordPress and WooCommerce websites have you recovered? 2. Have you previously removed Yanz Webshell or another PHP web shell? 3. How will you preserve our website design, products and WooCommerce orders during the cleanup? 4. How will you confirm that no hidden backdoors remain? 5. Will you manually inspect the website files and database, or only use an automated security plugin? 6. How will you verify WordPress core, plugins and themes after cleaning? 7. What steps will you take to prevent reinfection? 8. Can you provide examples or reviews from similar malware-removal projects? 9. What is your estimated completion time? 10. Do you offer a limited post-cleanup guarantee if the same malware returns? Suggested Project Type Fixed-price project Applicants should provide a complete quotation covering: Backup and recovery Malware removal Website testing Security hardening Written completion report A reasonable post-cleanup support period Please begin your proposal with the words “TYMO CLEANUP” so that we know you have read the full project description.