
In Progress
Posted
Paid on delivery
My VPS has been flagged for unauthorized file changes and I can already see unfamiliar PHP files appearing in several directories. I host between three and five sites on this box, all of them PHP-based, and at the moment none of them benefit from any form of backup. What I need you to do: • Identify and remove every trace of the current infection without breaking production. • Harden the server and each individual vhost (firewall rules, file/folder permissions, updated PHP modules, disabled insecure functions, etc.) so the same exploit cannot be repeated. • Implement a reliable backup routine—full site files and databases—stored off-server and retained on a rolling schedule I can adjust later. • Generate a concise report that shows what was found, what was removed, and exactly which security changes were applied so I can review or replicate them in the future. Acceptance criteria – All sites load normally and malware scanners (Maldet, ClamAV or similar) return clean results. – Backups run automatically and are restorable via a simple command or panel click. – No new unauthorized files appear during a 48-hour monitoring window. SSH root access, panel login and any logs you request will be provided immediately after project start.
Project ID: 40720283
41 proposals
Remote project
Active 6 days ago
Set your budget and timeframe
Get paid for your work
Outline your proposal
It's free to sign up and bid on jobs

Hello Sir, OK, I can fix it and available to work during the weekend too. Let's start. Regards, Nure Alam
$100 USD in 2 days
7.2
7.2
41 freelancers are bidding on average $123 USD for this job

Hello, As an experienced and versatile developer, I'm no stranger to troubleshooting and streamlining systems, which makes me the ideal candidate for your project. With over 15 years in the industry and an emphasis on developing classy, scalable and secure web solutions, I have honed my skills on numerous complex projects that have ranged from creating automation tools, building ERPs and CRMs to deploying scalable cloud infrastructures. Impressively, my PHP and server management expertise has been utilized in solving challenges as related to yours countless times. As a matter of fact, I appreciate the urgency of your task. Following best practices, I approach security audits and malware removal with a meticulous eye for detail that ensures nothing is overlooked; I'll unearth all traces of malicious activity with minimal or no downtime Beyond just fixing the immediate issue, I'll fortify your server and deploy my ninja-level security measures to seal any backdoors. Additionally, in considering the future environment you deserve, I'll establish a fluid backup system that can be easily customized while ensuring all your data are protected offsite. Lastly but most importantly is my commitment to rendering service equipped with utmost clarity. That means I'll document every step of this journey for you in a concise report, show what was identified, removed and provide comprehensive details of security changes made so you can replicate them in future. Thanks!
$130 USD in 3 days
8.6
8.6

With experience securing and maintaining VPS servers, I understand the urgency of removing malware, hardening server security, and implementing backups for your PHP-based sites. My past work includes cleaning infected servers and setting up robust security measures to prevent future breaches. Question: Are there any specific security measures or preferences you would like me to prioritize during the server hardening process? Regards, Yogesh Kumar
$30 USD in 7 days
8.4
8.4

Hello there, I can handle this as a production-safe malware cleanup and server-hardening job, starting with identifying the infection source and affected files before removing anything. I’ll scan the VPS and each PHP site, review suspicious files, processes, users, permissions, logs, PHP configuration, and web-server/vhost settings, then clean and harden the environment without disrupting legitimate production code. I’ll also implement automated off-server backups for site files and databases with configurable retention, verify that backups can actually be restored, and run Maldet/ClamAV or equivalent scans after cleanup. During the monitoring period, I’ll check for new unauthorized file activity and provide a concise report documenting the findings, removals, security changes, backup setup, and recovery procedure. Here is my portfolio: https://www.freelancer.in/u/sainiji92 Let’s connect and I can clean the compromised environment, harden all hosted sites, establish tested backups, and leave you with a documented recovery process. Regards, Pankaj
$160 USD in 3 days
6.9
6.9

Hi! I can help you clean the malware from your PHP sites, harden your VPS, and set up a reliable off-server backup routine. I've previously worked extensively with Linux servers, PHP security, and malware remediation. I can start right away. Best regards, Saeed
$30 USD in 1 day
6.6
6.6

Ready to start now ---- I will remove malware from PHP websites & secure your server surely. Give me chance to show you good result. Thanks
$125 USD in 2 days
6.5
6.5

Hi, You're dealing with a compromised PHP server hosting 3-5 sites with no backups, needing malware cleanup, hardening, and a reliable off-site backup. This reminds me of similar VPS hardening tasks where a fast cleanup and clear hardening steps matter. I'd start by validating current infection traces, then isolate unstable parts, remove malicious files, and lock down PHP settings for all vhosts. Next, I’d implement a rolling backup routine (files + DB) stored off server, with a simple restore command, and basic monitoring. Finally, I’d generate a concise report detailing findings, removals, and applied security changes so you can review or reproduce them. One technical risk / key challenge: ensuring uptime during cleanup while removing hidden backdoors. Two clarification questions: - What should happen if a previously clean site later shows signs of reinfection? - Do you have a preferred off-site storage provider and backup retention window? If we're aligned, I can outline the implementation phases before kickoff. Best regards, Brandon
$100 USD in 1 day
6.1
6.1

Hello there. I hope you are donig well. I have successfully handled similar projects by identifying and removing malware while ensuring the integrity of all hosted applications. My experience with PHP, web security, and VPS management has equipped me to tackle your current challenges effectively. I understand that your VPS is compromised, and you need a thorough malware cleanup, server hardening, and a reliable backup routine. My approach involves systematically removing any infections, securing your server against future threats, and implementing a backup solution tailored to your requirements. I will provide high-quality, comprehensive solutions that include a detailed report of findings, actions taken, and security enhancements. My commitment is to ensure all your sites are secure, running smoothly, and equipped with automated backups, guiding you towards a safer hosting environment. Please feel free to reach out to me. I look forward to working with you. Best regards, Billy Bryan
$30 USD in 3 days
5.6
5.6

Hello, You've mentioned the urgent need to clean malware from your VPS and secure your PHP server, including implementing a backup routine and generating a detailed report. I have extensive experience in web security and server management, with a recent project involving a similar cleanup and hardening process for a client's server. For your project, my approach would be to conduct a thorough malware scan, remove any traces of infection, and implement robust security measures to prevent future exploits. Additionally, setting up automated backups and providing a comprehensive report will ensure your sites are protected and easily recoverable in case of any issues. To get a better sense of my skills, please visit my portfolio: https://www.freelancer.com/u/SajidaSaqira/SS-Technologies I would appreciate the opportunity to discuss your project further and address any specific requirements you may have. Best regards, Sajida Saqira
$80 USD in 7 days
5.8
5.8

Hi there, The VPS is showing active PHP malware reinfection across multiple production sites, with no current off-server backups or recovery path. I have strong hands-on experience with PHP server security and have solved similar problems involving malware eradication, vhost hardening, and MySQL backup recovery. My approach would be to: * Review the existing server configuration, vhosts, filesystem changes, access logs, scheduled tasks, and current implementation. * Identify the root cause and determine what can be reused versus what needs to be changed. * Implement a clean, maintainable solution using PHP security controls, firewall rules, least-privilege permissions, malware scanning, and encrypted off-server backups. * Test edge cases, reliability, performance, security, and integration behavior, including full site restores and MySQL database recovery. * Deploy or integrate the fix without disrupting the existing system. I will preserve production functionality while comparing suspicious files against known-good application code and monitoring write activity during the 48-hour validation window. Backup retention will be configurable, with a documented restore command or panel workflow. I prefer fixing the actual root cause rather than applying temporary patches, and I will keep the implementation simple, stable, and maintainable. I can start by reviewing the VPS configuration, vhost files, malware indicators, logs, and backup destination, then proceed with the most
$155 USD in 2 days
4.6
4.6

Hello there, I can assist with cleaning malware from your VPS and securing the PHP server. I will identify and remove the infection, implement security measures like firewall rules and updated PHP modules, set up a backup routine, and provide a detailed report for your review. Ensuring that all sites load normally, backups run automatically, and no new unauthorized files appear is my priority. I will start by analyzing the current situation and then proceed with the necessary steps to secure your server effectively. Thanks, Manisha
$140 USD in 4 days
4.4
4.4

Hello, I understand your urgency regarding the unauthorized file changes on your VPS and the need to secure your PHP-based sites. It's crucial to address these vulnerabilities promptly to prevent further issues. I have extensive experience in server security, specifically with PHP environments, and have successfully mitigated similar threats in the past. My expertise includes server hardening, firewall configuration, and secure backup implementations. To address your needs, I propose the following approach: - Conduct a thorough scan to identify and remove all malicious files and scripts without disrupting your live sites. - Implement robust security measures, including adjusted firewall rules and secure file permissions, to prevent future exploits. - Set up a reliable backup routine for all site files and databases, ensuring off-server storage with an adjustable retention schedule. - Provide a detailed report outlining findings, actions taken, and security enhancements for your records and future reference. I am eager to help you restore and secure your VPS environment efficiently. I am confident in delivering quality results and can start immediately. Please feel free to reach out for any further details or questions. Thank you!
$140 USD in 7 days
4.8
4.8

Hi, Your VPS has been flagged for unauthorized file changes, which is a critical issue especially with multiple sites depending on its security and backup. To address this, I’d like to clarify: have you already identified any potential entry points or vulnerabilities that could have led to these infections? Here's how I'd do it: - Conduct a thorough analysis to identify and remove the malware without disrupting your live sites. - Implement security hardening on the server and vhosts, adjusting firewall rules and permissions as necessary. - Set up a scheduled off-server backup system with clear reporting to monitor and manage recovery easily. I can have a working version of the core cleanup ready on a test link within a day. What specific backup retention schedule do you envision for your sites? Toqeer S
$110 USD in 3 days
3.7
3.7

Hello Sir, I have already worked on similar types of website and software development projects and I am confident that I can successfully handle your project. I am a full-time freelancer with **17+ years of experience** in web development, software development, automation, and API integrations. My expertise includes: * ASP.NET C# web and software development * Android app development * Python automation and web scraping (Amazon, Instagram, Facebook, Google Maps, LinkedIn, Telegram, and other custom scraping solutions) * JavaScript, jQuery, AJAX, Bootstrap, HTML5 * Microsoft SQL Server database development * Payment gateway integration * SMS, Email, Banking, Financial, and Insurance API integration * Custom automation bots and workflow automation software I focus on delivering **high-quality, scalable, and reliable solutions** with clean code and long-term support. Please contact me in private chat so we can discuss your requirements in detail. I can also show you a **demo of similar projects** I have completed. Looking forward to working with you. Thanks & Regards
$250 USD in 2 days
3.4
3.4

Hi, Root cause: unfamiliar PHP files across directories indicate an active compromise, likely aided by missing backups and weak hardening. Extended infection surfaces and stale PHP modules keep vectors open. Solution: remove malware with a staged cleanup, lock down permissions, disable insecure PHP functions, update modules, tighten firewall rules, and implement off-site, rolling backups for all sites and databases. Experience: I remediated malware on 40+ PHP hosts, rebuilt secure stacks, and deployed automated off-site backups with clean-scan results in test runs. Smart suggestion: add a lightweight WAF, fail2ban, and routine security baselines per vhost with monitoring alerts. Question: would you prefer backups on AWS S3, Google Cloud, or another off-site target? Thank you, - Bohdan
$50 USD in 2 days
3.2
3.2

Hi, I can handle the malware cleanup, server hardening, off-site backups, and 48-hour monitoring without blindly deleting files from production. I’ll first create a recoverable snapshot and review logs, modified files, web roots, cron jobs, system services, SSH users, upload directories, and database content to identify the entry point and persistence mechanism. Infected files will be cleaned or replaced with verified originals, followed by Maldet/ClamAV scans and manual checks for PHP web shells and obfuscated code. I’ll then patch the server and applications, rotate affected credentials, isolate vhosts, correct ownership and permissions, restrict PHP execution where appropriate, harden SSH and the firewall, and remove unused services or modules. Backups will include files and databases, encrypted and stored off-server on an adjustable retention schedule. I’ll perform a real restore test before handover. You’ll receive a concise incident report covering findings, removed files, likely entry point, security changes, backup commands, and recovery steps. I’ll monitor file changes and logs for 48 hours after cleanup. Which OS/control panel is installed, and do you already have an off-site backup destination?
$140 USD in 7 days
3.2
3.2

Hi, Diego Vinicius here from Brazil. I understand the urgency of your situation with unauthorized file changes on your VPS. The main challenge lies in not only cleaning the malware but also securing the PHP server to prevent future breaches effectively. My approach involves meticulously identifying and removing all traces of infection, implementing robust security measures such as firewall rules and updated PHP modules, and setting up a reliable backup system off-server. I prioritize transparency in providing a detailed report of all actions taken for your review and future reference. Clarifying Questions: - Have you noticed any specific patterns or suspicious activities leading up to the unauthorized file changes? - Are there any specific compliance requirements or security standards that need to be met for your websites? - Do you have any preferred backup storage locations or retention periods in mind? Let's discuss how we can proceed to resolve this issue efficiently.
$200 USD in 3 days
2.3
2.3

Hi I’ve reviewed “Clean Malware & Secure PHP Server” and your requirements match my experience with PHP, Web Security, MySQL, VPS, Internet Security, Security, Database Management, Incident Response. I can help you build this properly and deliver a reliable solution based on your requirements. Your stated budget looks reasonable for the scope, and I’d be happy to discuss the details and suggest the best approach. Could you share a little more about the project requirements and the main goal you’re looking to achieve? Best regards, Khadija Tul Kubra
$150 USD in 7 days
2.4
2.4

Hi, I’ve reviewed your project and understand that you’re looking for a fully cleaned and hardened PHP VPS with reliable off-server backups, with particular attention to stopping the current infection without disrupting production. I can help you with this by carefully auditing the server, removing malicious files, tightening PHP and vhost security, and setting up a dependable backup routine. I have relevant experience with PHP server hardening, malware cleanup, and Linux VPS administration, and I’ll make sure the work is accurate. For your project, my approach would be: • Identify the infection source, quarantine malicious files, and verify site integrity before cleanup • Harden firewall, permissions, PHP settings, and vhost isolation across all sites • Configure automated off-server backups for files and databases with restore-ready validation I’ll keep communication clear throughout the project and provide regular updates so you always know the progress. I can start immediately and can work within your deadline/budget. If you share the server panel type and preferred backup destination, I can confirm the exact approach and get started. Looking forward to discussing the project with you. Best regards, Kanae
$155 USD in 2 days
1.4
1.4

Hello, Drawing from my decade-long experience as a DevOps and Cloud Engineer, I am well-equipped to address the critical security issues you currently face. I possess an in-depth knowledge of PHP, a domain that is susceptible to several malicious attacks and intrusions. Over the years, I have skillfully implemented secure solutions for various industries like Finance, Media, Healthcare and Education. Your project's requirements closely align with my expertise: identifying and removing malware swiftly yet cautiously while maintaining the system's functionality. A notable strength I bring to the table is not only securing the existing environment but also creating proactive defenses preventing recurrences of similar exploits. My value addition lies in devising extensive firewalls, implementing foolproof backup routines and fine-tuning PHP modules which will heighten your server's protection and enhance its resilience. Additionally, given your need for comprehensive documentation, my MBA in E-Business will help me articulate a coherent report delineating every change made, every malware removed ensuring you understand the actions taken thoroughly. I understand the urgency of this situation and assure you of my unwavering commitment to deliver restored functionality without disrupting productivity. Let's restore your VPS security with diligence and precision. Thanks!
$155 USD in 5 days
0.0
0.0

Your VPS appears to have a PHP-based compromise with unauthorized files being created, so the priority is removing the infection safely while preserving your live websites and preventing the same attack path from returning. I have experience working with web applications, Linux-based environments, server deployments, databases, and production system troubleshooting. I understand that malware cleanup is not only about deleting suspicious files, but also identifying the entry point, reviewing logs, fixing permissions, and hardening the environment. I can help audit the affected VPS, inspect suspicious PHP files and processes, remove malicious code, review vhost configurations, improve PHP/server security settings, and set up automated off-server backups for both website files and databases. I will also provide a clear report of findings, applied fixes, and recommended maintenance steps. The first step would be reviewing server details, PHP versions, hosting setup, recent logs, and affected directories to determine the safest cleanup approach without disrupting production. Can you share the VPS operating system, control panel (if any), and the type of PHP applications hosted on the server?
$140 USD in 3 days
0.0
0.0

Airport City, Ghana
Payment method verified
Member since Jan 26, 2018
$30-250 USD
$10-30 USD
$30-250 USD
$10-30 USD
₹600-10000 INR
$250-750 AUD
$15-25 USD / hour
₹750-1250 INR / hour
₹1500-12500 INR
$30-250 USD
min ₹2500 INR / hour
$750-1500 USD
$15-30 CAD
₹9500-10000 INR
₹1500-12500 INR
₹37500-75000 INR
₹12500-37500 INR
$3000-5000 SGD
₹1500-12500 INR
$250-750 USD
£20-250 GBP
€1600-2000 EUR
₹12500-37500 INR
$3000-5000 USD