Hacked site cleanup for business websites
Your WordPress site was hacked. We clean it up and lock it down.
Take a breath. We clean hacked WordPress sites for business owners and for agencies looking after client sites. We remove the malware, search for the hidden ways back in, close the hole the attacker most likely used, and ask Google to lift its warning.
$249 covers a straightforward cleanup. Heavier damage, a large site or several sites on one hosting account cost more, and you approve the price before we start.
Hacked sites are flagged as emergencies and jump the queue.
Cleanup log
- wp-content/uploads/cache.phpBackdoor file: Removed
- wp-includes/load.phpAltered core file: Restored
- Settings · site addressHidden redirect: Cleaned
- Posts and pagesSpam links: Cleaned
- Users · wp-supportUnknown admin: Removed
- Scheduled tasksReinfection job: Removed
Spot any of these?
One is enough to have it checked. Many hacks are built to hide from the site's owner while they work on your visitors and your Google ranking.
Visitors get sent somewhere else
Often only on phones or only from Google, so the site can look fine when you check it yourself.
A warning in Google or the browser
“This site may be hacked” under your listing, or a red “Deceptive site ahead” screen.
Pages you never wrote
Spam for pills, gambling or knock-off goods under your domain in Google, sometimes in another language.
Your host suspended the account
Or sent an abuse notice saying your site is spreading malware or sending spam.
You are locked out
Your password stopped working, or there are admin users you did not create.
Pop-ups or ads you did not place
Or the site has suddenly slowed to a crawl for no reason you can find.
Your security plugin is alarmed
Reports of changed WordPress files, or unknown files you did not upload.
Cleaned layer by layer.
A hacked site is rarely one bad file. Attackers spread through the site and leave ways back in, so deleting what you can see is not enough. We go through each layer, and you get a plain-English report of what we found and fixed.
Files.
Clean
Your theme, plugins and WordPress itself, plus the uploads folder where attackers like to hide code. Injected code comes out, and altered WordPress files are replaced with clean originals.
Database.
Clean
Spam links, hidden redirects and scripts tucked into your posts and settings are removed. Your real pages, products and content stay put.
Accounts.
Reset
Admin users you did not create are removed, and WordPress passwords and security keys are reset so stolen logins stop working. We walk you through changing your hosting and email passwords too.
Ways back in.
Closed
Attackers leave hidden doors so they can return after a cleanup: disguised files, scheduled tasks, server rules. We search for them, then close the hole they most likely came in through, often an outdated plugin or a reused password.
Reputation.
Review requested
Once the site is clean, we ask Google and the other blocklists to review it and lift their warnings. They decide when; we send the details of the cleanup with the request.
One flat price. Agreed before we start.
No hourly billing and no surprise invoice. You know what the cleanup costs before we touch your site.
Hacked site cleanup
From$249
Flat rate, approved by you before work starts.
What makes it cost more
- A badly damaged site, or one that keeps getting reinfected
- A large site or online store
- Several sites on the same hosting account
- Malware and injected code removed
- A search for hidden backdoors
- Database cleaned of spam and redirects
- Unknown admins removed, passwords reset
- Security holes closed, the site hardened
- Google review requested to lift warnings
- A plain-English report of what happened
Want it to stay clean? Every care plan includes weekly updates, daily backups and daily security scanning. Not hacked, just worried? See security and hardening.
Tell us what is happening.
The form below asks for an email and what you are seeing. Nothing to prepare.
We confirm the price.
We look at the site and confirm the flat rate. A straightforward cleanup is $249; a bigger job costs more, and you approve the price before any work starts.
We clean it and lock it down.
Then you get the report: how they most likely got in, what we removed, and what we changed.
While you are here
Hacked site questions
Tell us what you are seeing.
Hacked sites are flagged as emergencies and jump the queue. You approve the price before we start, and telling us costs nothing.
While you wait
Don’t delete the site. The clues to how they got in are in there, and so is your content.
Don’t restore an old backup over it yet. The backup may be infected too, and the hole they used is still open.
Do change your passwords. WordPress, hosting and email, from a computer you trust, if you can still log in.