We rescue hacked WordPress website, remove malware, and make it healthy again
There are thousands of websites being hacked everyday. Hackers (cyber-criminals) uses automated methods to hack outdated, vulnerable websites. Most hacks are automated, non-targeted, intentionally hidden (hidden to both website owner and web hosting).
Most of the injected malware are
- backdoor (for remote control)
- file manager (hacker can remotely manage your website files)
- spamming (use your website IP and your domain to send spam or fraud email)
- fraudulent website (capture login username/password, e.g. mailbox, bank)
- suspicious site redirection (redirect to another site, a black-hat SEO technique)
- distribute virus/Trojan
- defacement (political reason)
- botnet member (to attack other website/network)
- etc, etc, etc…
Sometimes, malware infection may cause your website be blacklisted in Search Engine Result page (SERP). It can drastically impact your website traffic.
Some PHP malware examples
The malware is not simply a single file, but probably a bunch of files spreading in different folders. Some used suspicious filename, like
- xxx.ico (pretend image file, but being included in other files, e.g. wp-config.php)
- 404.php (pretend page-not-found)
- .djklshjdg.php (hidden file, prefix with a dot)
- wp-files.php (pretend one of WordPress core file)
It is easy to identity a single malware, but it is very difficult and tedious to identify ALL of them at the same time.
When you discover your website infected with malware, from our experience, the website shall be infected with number of malware files. It might be dozens (or even hundreds) of malware files. Most of these malware could be further used to execute arbitrary code or file injection. Therefore the number of malware file can grow very fast.
You may try to clean those malware files by yourself. However, perhaps, a few days (2 – 4 days) later, your web hosting company informs you the website is sending spam, attack other website or phishing.
Most likely, you have not cleaned the website completely in your last attempt.
In fact, hunting malware file may not be difficult (although sometimes be tricky). However, for end-users (or web design house), completely cleaning the website could be a tedious and time-consuming task.
WordPress Hack Recovery and Malware Removal
We can clean your WordPress website and remove Malware files.
We will quarantine your website. Extract your data, import into a blank-new healthy one. In this way, we can ensure the new WordPress is free from malware files.
At the same time, we will update WordPress to strengthen security, and minimize the chance of being infected again.
Service includes
- Backup, quarantine existing website
- Extract data from existing WordPress, and import into a blank-new WordPress.
- Update your WordPress website to latest version to strengthen security.
- Remove not-necessary themes (reduce attack surface)
- Blacklist removal (if listed)
We, on behalf of you, will request Google Safe Browsing to review your WordPress website, and request to remove blacklisted status - Support from WordPress Hosting Professional
We have been working on website hosting over 10 years.
Information Needed?
We need –
- Control Panel login information, and
- WordPress admin panel login information
Processing Time?
Normally within 48 hours, depends on complexity
(Usually in 24 hours)
How many site?
One single WordPress installation
(No WPMU multi-user supported)
How to pay?
For international customers, you can pay by PayPal.
For Hong Kong customers, you can pay by PayPal, or bank transfer.
Service Fee?
One time service fee: HK$1600
30 days recovery support included.
Cannot Fix?
Most can be fixed. In case we cannot fix it, full refund
Copyright 2015 - 2020 (c) Website Maintenance Service Limited
Contact: (852) 3502-4863
Fax: (852) 3007-4863
Email: info@supportweb.hk
Office: 1617A, Profit Industrial Building, 1-15 Kwai Fung Crescent, Kwai Fong, Hong Kong