Joomla Malware Removal & Security Hardening

Website: www.personalizzalo.it
Php 8.1.32
Joomla! 4.4.14 Stable [ Pamoja ] 30-September-2025 16:00 GMT
Apache/2.4.37 (Rocky Linux) OpenSSL/1.1.1k
Mysql 8.0.41

Our Joomla-based online store—which uses a custom mobile phone case configurator to process orders—has just been flagged as infected with malware. Scans indicate infections within the core Joomla files, while the configurator code remains intact as it operates independently of Joomla. Unfortunately, I do not have a recent backup to restore the site from, so it must be cleaned in place and then fully secured.

Here is what I need:
• A comprehensive, documented scan of the filesystem and database to isolate and remove any malicious files, scripts, or backdoors.

• Restoration of all legitimate core Joomla files, followed by version updates and any necessary patches to ensure the store can securely accept orders again.

• Verification of full end-to-end functionality following the cleanup.

• Implementation of additional security measures directly on the production server (e.g., firewall rules, permission restrictions, custom admin URLs, two-factor authentication, and any other standard best practices you employ).

• A final security report summarizing the vulnerabilities found, the solutions implemented, and clear recommendations for next steps.

I will provide FTP access and Joomla administrator credentials. I value clear and frequent communication: please let me know your requirements, provide an advance estimate of any downtime, and keep me updated on the progress of the work.