What to do when your WordPress Website Gets Hacked or Malware

No Comments

wordpress hacked 2015 malware

We have much experience with getting and removing hacked files from a WordPress site, some of it is so UGLY its disgusting, Like maggots on a dead body we know its Halloween lets keep it in season.   So we have numerous hosting accounts let us tell you STAY AWAY FROM GODADDY, they will up-sell you every chance they get for an issue like this with Site lock. They don’t give you a FREE SCAN to clean up the files, so out of frustration We have created this guide.

First Solution ( Back up your WordPress ALWAYS )
Some hosting providers only back up for a month, so if you have been hacked, set it to a point where you were not exploited, then UPDATE EVERYTHING, your plugins and WordPress, even your theme. I also suggest you delete and unwanted themes.

Second Solutions
If this does not work for you do the following, so malware or a virus in your website is just like that of your COMPUTER, CODE. Ugly exploits and lines of gibberish, I suggest you archive and download all your files on your website to your computer. Use something like Advast ( One of the best ) and scan all your files in that folder, its really that simple delete them in your FTP FOLDER, or clean up the malicious code. If you scan your site with Sucuri free scan Sucuri Scan Check, They will give you the code strings. Then you can easily find them with in any HTML Editor for that individual file. ( It might be a good idea to buy the service if its a high propriety site )

“Ounce of prevention is worth a pound of CURE”

Now. Do This for the future ( Update everything)

1. Change your cPanel and FTP passwords.
2. Disable/remove any application/script/module you are not using.
3. Upgrade and secure all of the applications you are using.
4.Change Joomla/Wordpress security credentials
5. Look for the file php.class.php in the /tmp directory of the server. This script allows re-infection via uploading of files to the server.

Other Prevention
Download word-fence in the wordpress plugins

Major Hacked Players
Gravity Forms often has exploits! ( Uploads Folder )
Rev Slider too, check them first!

If you have any questions please ask or email ! Thanks!

Prevent Future Attacks



Best Virus Scan

This is author biographical info, that can be used to tell more about you, your iterests, background and experience. You can change it on Admin > Users > Your Profile > Biographical Info page."

Request a free quote

We offer professional SEO services that help websites increase their organic search score drastically in order to compete for the highest rankings even when it comes to highly competitive keywords.

Subscribe to our newsletter!

More from our blog

See all posts