We are using hostgator host. we hosted around 10+ sites there and mostly for charity so not a heavy budget. our site is infected with virus and we restore our sites many time and after every week or 2 same virus again disturb our all sites. Hostgator recommend sitelock which is beyond our budget. any free anitvirus that we can run to clean up our files?
A better solution might be to go through the code, passwords and other attack-vectors to see if there are obvious vulnerabilities. Also, after doing this, have Hostgator reset the whole server / setup before uploading the revised code again. Might take a little while to go through, but adding an antivirus is mostly just patching symptoms, instead of fixing the cause. Also, remember to check the database for content that shouldn't be there.
Can you please explain what does it actaully means "Also, remember to check the database for content that shouldn't be there." did not understand what to check?
Look in the wp_posts table and look for things like iframes and javascript that does not belong there. Hackers sometimes will alter the posts to redirect visitors to pages that will attempt to infect them with a virus/trojan or do so with an iframe. The main attack vector for Wordpress is plugins. So make sure you are using up-to-date plugins and Google to see if any have any vulnerabilities. Another thing hackers like to do is put in multiple back doors so if the original exploit is found, they have another way to gain access to the account. As such, it is best to delete all of your existing Wordpress installation's files (after backing up your themes and uploads and stuff) and do a fresh reinstall of Wordpress. Also, if you can, reinstall your themes using backups that you know are clean. And if you don't have any backups (you should always have backups of your files and databases) and have to re-use your existing theme(s), open up each and every PHP file and look for any code that does not belong there. Because hackers will not only install new files to have a back door, they can also edit your existing files to have a back door. One more step you can take is to "harden" your Wordpress install. https://codex.wordpress.org/Hardening_WordPress
Our sties are in Joomla. I check with hostgator only solution they offer is paid one that is site lock which we cannot afford. There is free one ClaimAV which cannot be install on shared hosting and we had to move to deticated hosting but we did not want to move. so hostagotor is not helping any free antivirus that can work on hostgator shared hosting we can use.