Cleaning viruses and malware from a WordPress site

If your website has fallen victim to an attack – for example:

• WordPress has been taken over and you have lost access
• The site is infected with malware
• The site is being used to send spam
• Unwanted adverts are being displayed
• Visitors are being redirected to other websites
• New pages have appeared that you did not create

We offer WordPress cleaning and malware removal as a small, self-contained job. We have a strong track record of recovering and cleaning up compromised websites.

How does malware get into WordPress?

Attackers generally use one of two common routes:

1. The WordPress administrator username and password have been guessed or cracked.
2. A security hole in an unmaintained or out-of-date plugin gives access to the site’s files. Malicious code is added to cause damage, along with back doors that allow the code to be restored even after it has been removed.

How does Zezz clean a WordPress site?

1. We establish the scope of the attack and which areas are compromised, checking the database thoroughly as well.
2. We take a backup of the current state.
3. We replace all WordPress core files and the plugins in use with clean versions.
4. We check the active theme’s directory (functions.php and so on) and remove any suspicious files.
5. We scan the wp-content directory and remove files that do not belong there.
6. We analyse possible weaknesses in the WordPress configuration and apply security measures to prevent further attacks.

Our service restores your site’s security and helps you avoid similar incidents in the future.