WordPress malware removal

Hacked website repair for WordPress.

If your website has been hacked, HostedWP cleans it up. We remove the malicious code, close the way in, and hand the site back with an incident report that includes as much detail as we can establish.

A tidy modern server rack in a bright server room

What the repair covers

A proper cleanup, not a quick hide.

We look through the WordPress files, the database and the admin users, then remove what does not belong.

Malware removed

Malicious files, injected code, spam pages and unwanted redirects are found and taken out.

Unknown access cleared

Admin users, passwords and leftover access you did not set up are reviewed and removed.

WordPress updated

Core, themes and plugins are brought up to date as part of the cleanup.

The way in is checked

We look for the weak point that let the hack in, then tighten the practical gaps we find.

A clean restore if needed

If the live site is too damaged, we restore from a clean backup when one is available.

Incident report

You receive an incident report with as much detail as we can establish. It covers what we found, where it was sitting, what was removed, which accounts were changed, and what still needs your attention.

How a repair works

From the first message to a site you can use again.

Tell us what you are seeing. We will look at the site and tell you what the repair involves before we start changing it.

1. You tell us what happened

A Google warning, a redirect, a new admin user, or a note from your host. Any of those is enough to start.

2. We copy the site first

A backup is taken before files are removed, so the cleanup can be checked against the original.

3. We clean WordPress

Malicious code, unknown users and leftover files are removed. Core, themes and plugins are updated.

4. You get the site back

We confirm the public pages load, then send the incident report and any logins that were changed. The report includes as much detail as the site allows us to confirm.

Signs to look for

When a WordPress site needs a repair.

  • Google, a browser, or your host says the site is unsafe.
  • Visitors are sent to a page you did not set up.
  • Pop-ups, spam pages or strange links have appeared.
  • A new admin user is in WordPress, or passwords no longer work.
  • Files keep changing after you edit them.

After the repair

Keep the site looked after.

A cleanup fixes the hack in front of you. Managed hosting keeps updates, backups, monitoring and a firewall in place afterwards.

Talk to HostedWP