Urgent Hostinger G_Hex Malware Cleanup

I’m fighting a stubborn G_Hex infection on a shared Hostinger server that holds four WordPress sites. I’ve already:
• re-installed clean copies of each site,
• pointed the domains through Cloudflare, and
• isolated the exact files and directories that keep getting reinfected.

Yet the malware still re-appears, so I need an experienced security specialist who can jump in today and wipe it out for good.

Scope of work
You’ll connect via SSH / File Manager, verify and remove every G_Hex signature, close whatever back-doors remain, then harden WordPress and the server so the code cannot return. I have recent, uncompromised backups ready if you prefer to start from a known-good snapshot.

Key details
• Platform: Hostinger shared hosting (hPanel)
• Sites: 4 independent WordPress installs
• Access provided: hPanel, SSH, phpMyAdmin, Cloudflare dashboard
• Infected paths: I’ll supply a list of the suspect core, theme and plugin files I keep finding altered.

Deliverables
1. Clean, functioning copies of all four WordPress sites online.
2. Written report summarising what was found, removed, and patched, including any plugins/themes deleted or updated.
3. Security hardening steps applied (file permissions, .htaccess rules, wp-config salts, Cloudflare or WAF tweaks).
4. Final malware scan (e.g. with WP-CLI, ClamAV, or your preferred tool) showing zero G_Hex traces.

This is time-sensitive, so please let me know how soon you can start and your estimated turnaround once you gain access.