Two excellent plugins
- Ithemes security pro. Is affordable. There is a free version that is limited. Find plugin on WordPress.org here. It used to be called Better Wp Security.
- Wordfence.com premium plugin for protection. Wordfence is more expensive and not better.
I use plugins and if something happens, I will escalate to the following companies.
Companies that offer website security
These companies offer subscription plans and can remove malware on a site and protect it.
These companies require a monthly subscription.
- Sucuri.net offers good plans. They are slightly cheaper than others below. Most of their communication is done via chat, they don’t take phone calls.
- Sitelock.com. Is partnered with bluehost.com and other hosts. Avoid them. They are very aggressive and overpriced.
Removing Malware From Website Yourself
I was able to watch the following video and remove malware from my site from blue host. I called and asked bluehost.com support to scan my site. Their Malware.txt report gives you each file that is a problem and shows you the path to go to it. I basically followed that path and went and removed those files.
Using a tip in the video below, I downloaded a new copy of Moodle from Moodle.org and identified the corrupted file and replace it with a new version of the downloaded software. I did back up of it first before doing anything.