Good night everyone, In this short articles I will share my story how to clean wordpress infected by malware. This story start around January 2016 when I’m still host this blog with hostgator. One day I got notification email coming from sitelock tell me there is malware infected my sites. I contact gator live support and they directed me to sitelock live support.
After the conversation done, sitelock offer me discount to get their scanner service to remove this malware. I hate that things so I decided to declined that offer and moved all my sites to digitalocean. At first time I do clean manually all my sites by deleting wp-admin and wp-includes folder then re-uploading fresh one from wordpress.org
After that, I check wp-content files and folders manually and remove some strange file. This works for 3 days but the malware keep coming back. I try this method again at least 5 or maybe 10 times and this f*cking malware keep coming back until I frustrated.