Redirects
The site sends visitors to other pages, often only from a phone or from search.
Website virus removal and hacked site cleanup
Redirects to other sites, spam pages, browser or Google warnings, unknown files and admins? We find the malware and the hole it came through, clean the site, close the entry and help get off blacklists. We work with WordPress, WooCommerce, OpenCart, Joomla, Drupal, Bitrix, Magento and custom code.
WordPressWooCommerceOpenCartPrestaShopMagentoJoomlaDrupal1C-BitrixShopifyCustom
Signs the site is hacked
Foreign links and spam
Links to casinos, pills and the like have appeared in texts, the footer or separate pages.
Warnings
The browser or Google says the site is dangerous or deceptive.
The site is slow and crashes
Unknown processes load the server and the hosting sends emails.
Unknown users and files
New admins, unknown scripts, changed file dates.
The host blocked the site
The provider found malicious code and suspended the account.
How we search
We check files, the database, scheduled tasks, access rules and hidden entry points. A single infection is rarely alone.
Where malicious code hides
Protection layers we set up after the cleanup
Malicious files are found and removed, not masked
Getting off blacklists
After the cleanup we file a review request with Google and other services. They decide the timing, we cannot guarantee it.
How we clean
- Copy and isolationWe make a full copy and, if needed, turn on maintenance mode.
- SearchFiles, database, cron, .htaccess, plugins, accounts.
- CleaningWe remove malicious code and restore clean files.
- Closing the entryWe find how the malware got in: an outdated plugin, a weak password, a vulnerability.
- HardeningUpdates, permissions, 2FA, firewall, login limits.
- MonitoringWe watch after the cleanup and check the infection has not returned.
How not to get hit again
All of this is part of site support if you decide to keep us.
Updates
Core, plugins and themes are updated on time. The unnecessary ones are removed.
Passwords and 2FA
Unique passwords, two-factor authentication for admins.
Backups
The 3-2-1 rule and restore testing.
Firewall and permissions
Protection at site and server level, minimal file permissions.
Questions and answers
Can the site be cleaned without losing data?
Usually yes. Before the work we make a full copy and replace only infected files and records.
How much does it cost?
It depends on the scale of the infection and the size of the site. We estimate after an inspection, with no hidden charges.
Will my Google positions return?
After the cleanup you can file a review request and the warning is lifted. Timing and result depend on Google, we do not promise them.
What do you need from me?
Access to the site and hosting. We work under an NDA, keep access in a password manager and close it after the work.
Can I do it myself?
A simple virus can sometimes be removed by yourself, but without closing the entry the infection returns. We find the cause.
Tell us about your site
Describe what is wrong: slow, hacked, needs support. We will suggest where to start. The first conversation is free.
Related services
Site optimization Site support Site migration Domain, DNS and email Technical SEO Article: slow website