Hacked WordPress site repair
Hacked WordPress site? We clean it up and close the way in, for $199 flat.
No plan needed. We back up the site as it is, remove the malware, find how they got in and shut it, then tell you what we found.
- A full backup before we touch anything
- Malware, spam pages and fake admin users removed
- The hole they came through closed
- A short note on what happened and what we changed
Signs of a hack
How to tell your WordPress site has been hacked.
You may see only one of these. Any of them is worth a look.
Visitors land on another sitePages redirect to spam, adult or fake prize sites, often only on phones or only from Google.
"This site may be hacked"Google shows a warning under your listing, or the browser shows a red "Dangerous site" page.
Strange pages in GoogleSearch site:yourbusiness.com and you find pages you never made, often in Japanese or selling pills.
Admin users you don't knowNew administrator accounts under Users, or your own login suddenly stops working.
Your host suspended the siteAn email saying malware was found and the account is disabled until it's cleaned.
Your emails go to spamYour domain ends up on a blacklist because the server was used to send spam.
How we clean it up
What happens after you send the request.
- We take a full backup of the site exactly as it is, hack and all, so nothing is lost.
- We scan the files and database and remove the malware, spam pages and backdoors.
- We delete admin users that shouldn't be there and reset the passwords and security keys.
- We find how they got in, usually an old plugin, and update or replace it.
- If Google flagged the site, we ask Google to review it once it's clean.
- You get a short note on what happened and what we changed.
What the $199 covers
- Finding the cause
- The full malware cleanup
- A backup taken before any work
- Closing the hole it came through
- Asking Google to review the site, if it was flagged
- A free re-clean if the same hole is used within 30 days
- A short written note for your records
No plan needed. If you join one afterwards, the $199 comes off your first months.
Right now
While you wait: what to do, and what not to.
Do
- Change your hosting account password
- Change your own WordPress password from a computer you trust
- Write down anything odd you saw, and when
- Send us the request so we can take a backup first
Don't
- Delete the site or start again from scratch
- Restore an old backup without checking it. It may hold the same hole
- Install a pile of security plugins hoping one fixes it
- Email your password to anyone, us included
Keep it clean
Most hacked sites were running old plugins.
A plan keeps WordPress, plugins and your theme updated every week and watches the site, so the next hole gets closed before anyone finds it. The $199 comes off your first months.
See all plans- Essentials$59/mo
- Business$99/mo
- Store$149/mo
Questions
About hacked site repair.
Do you need my password?
No. We'll ask you to add a temporary admin user, which you can delete when we're done. Please don't email passwords.
Is it really $199 flat?
Yes, for the cleanup, the fix for the hole they came through, a Google review request if the site was flagged, and the written note. No plan is needed.
Will I lose my content?
No. We back up the site exactly as it is before we change anything, so your pages, posts and orders are kept while we remove what doesn't belong.
How long does a hacked site cleanup take?
Most cleanups are finished within a day of getting access.
What if it gets hacked again?
If the same hole is used again within 30 days, we clean it again at no charge. On a plan, we keep everything updated so it doesn't happen.
My host suspended the site. Can you still help?
Yes. Hosts usually reopen access for a cleanup, or give us the files. We'll tell you what to ask them for.
Get my site cleaned up
Send the address and what you're seeing.
The form goes straight to us as urgent, with "hacked" already picked. Most cleanups are finished within a day of getting access.
Hacked site cleanup