What should I do after cleaning the site of infections?

The following steps must be followed after a website/account has been cleaned of malware to prevent reinfection.

1. Update the application used on the website. Whether it's WordPress, Joomla, Drupal, or any other CMS or application, you need to update its main version, as well as the installed themes and extensions.
   You may need to contact the website developer for this.
   Recommendation: Periodically update the website application to the latest available version.
2. Change all passwords associated with the hosting account: Control panel, FTP, Email.
3. Change the administrative user password for the application used
   Check additional users in the application to ensure they are valid.
4. Change the password for the user assigned to the database.
   Operation can be performed from the control panel.
5. Scan all workstations/devices that have accessed the hosting account with an updated antivirus.
   An infected workstation could potentially infect the web hosting account in certain situations.
6. Clean up the account by removing old or unnecessary files, software, email accounts, subdomains, etc.
   Old scripts tend to have vulnerabilities and may be the cause of the initial infection even if they are not actively used on the site.
7. Make a complete backup of the hosting account once everything has been cleaned up and start performing periodic backups of the site whenever you make an important change.
   Keep these backup copies on the local hard drive.