How do you stop the site from getting reinfected?

Reinfection happens when the cleanup removed the malware but left the hole open. We close it: apply all outstanding Adobe APSB security patches, tighten file permissions, change the admin URL, enforce 2FA, rotate every admin and API credential, and set up a file-integrity baseline with monitoring. Our Full Cleanup + Harden tier includes a 6-month reinfection guard, if the same hole is re-exploited in that window, we re-clean at no charge.