Remove WooCommerce Redirect Malware

My WooCommerce-based store is suffering from an intrusive “smart pop-up / redirection” infection that keeps sending customers to unwanted pages. I already ran a commercial antivirus / malware-removal tool, but the problem instantly re-appeared, so the malicious code is clearly embedded somewhere in core files, a plugin, the theme, or the database. What I need from you is a full clean-up and hardening of the site: • Identify every infected file, script, and database entry • Remove or replace compromised code without breaking store functionality, orders, or product data • Patch vulnerabilities, update components, and set the correct permissions so the hack can’t return • Deliver a brief post-clean report summarising what you found, how you fixed it, and steps I should follow to stay secure (firewall, backups, security plugin, etc.) The job is complete when the site loads with no pop-up or redirect behaviour, passes an external malware scan (Sucuri / Google Safe Browsing), and runs smoothly for normal customers.

Project ID: 40551853