How to remove the malware attack in wordpress?

[parulsharma]

Manual removal, for which you need to:

Back up your site.
Use anti-virus and malware scanning software on the backup locally.
Eliminate malware by tweaking your WordPress files and deleting old or suspicious ones.
Reset all user passwords and check for suspicious users.
Reinstall plugins and themes.

[lishmalinyjames]

Log into your server via SFTP or SSH.
Create a backup of the WordPress site before making changes.
Identify recently changed files.
Confirm the date of changes with the user who changed them.
Restore suspicious files with copies from the official WordPress repository.
Open any custom or premium files (not in the official repository) with a text editor.
Remove any suspicious code from the custom files.
Test to verify the site is still operational after changes.

[techinfo]

Malware can be stopped using plugins like bulletproof wordpress plugins and by using strong mod_security codes and hardening apache

[lishmalinyjames]

Step 1: Backup the Site Files and Database.
Step 2: Download and Examine the Backup Files.
Step 3: Delete All the Files in the public_html folder.
Step 4: Reinstall WordPress.
Step 5: Reset Passwords and Permalinks.
Step 6: Reinstall Plugins.
Step 7: Reinstall Themes.