Hacked WordPress Site Cleanup: Malware Removal from €150

What are you seeing on your site?

Pick what you’re seeing. I’ll tell you what I check first and what the cleanup costs.

What you get, free

What the attack touched, in plain words
The fixed price of the cleanup
What not to do in the meantime
How to give me access without sending a password

What you’re seeing

Redirects to other sites Google warning (dangerous site) Unknown pages or files, spam An admin you don’t know The hack came back

What I check first

The .htaccess file
WordPress core files
The database and unknown admin accounts

Cleanup from €150

Get the diagnosis

What it costs

Hacked site cleanup

What is included, step by step.

Backup first: The infected state is saved before anything else.
Full cleanup: Suspicious files, database entries, accounts and scheduled tasks removed.
Hole closed: The way in found and closed, not just the symptom.
Hardening: Updates, passwords changed, firewall, and a Google review request if needed.
Report: What happened and what was done, on one page.

From €150 excl. VAT, fixed price before you commit

Timeline given with the diagnosis, within 4 working hours
No fix, no fee
You pay after the repair, not before

Get my fixed price

A hacked site cleanup starts at €150. The price depends on how far the infection goes, not on the hours: you know it before I start. On the Complete maintenance plan, cleanup is included.

How it goes

It starts with the form above. No commitment.

Get the diagnosis

You describe what you’re seeing

The form or a WhatsApp message.
You get the cause and the price

Within 4 working hours.
You give me temporary access

I guide you; no password by email.
Your site is clean

Checked page by page, with the report.

Is this for you?

This is for you if

Visitors are redirected to dodgy sites
Google or Chrome flags your site as dangerous
Spam pages show up in Google
A first cleanup didn’t hold and the hack came back

This is not for you if

Your site shows a critical error or a white screen with no sign of a hack (see WordPress repair)
The problem is only your domain name or your email

How do you know your WordPress site has been hacked?

Visitors are redirected to gambling, pharmacy or scam sites, sometimes only on mobile or when they come from Google.
Google shows “This site may be hacked”, or Chrome blocks access with a red warning screen.
Pages you never wrote appear in Google’s results.
An admin you don’t know shows up in the list of users.
Your host has suspended the site or reports that it is sending spam.

How I clean a hacked site

I back up the infected state, so nothing is lost and the traces of the attack are kept.
I replace the WordPress core, the theme and the plugins with official copies.
I remove suspicious files, accounts and scheduled tasks, then check the database.
I find the hole and close it: updates, passwords changed, tighter access, a firewall.
If Google flagged the site, I request a review in Search Console.
You get a one-page report: what happened and what was done.

What not to do while you wait

Don’t delete files or reinstall WordPress: that erases the traces that show how they got in, and the hack comes back. Change your admin and hosting passwords, keep your latest backup aside, then write to me. If you want to understand what is going on first, I’ve covered the first hour in hacked WordPress site: what to do.

Stopping it from happening again

A hacked site was almost always hacked through a plugin or theme that wasn’t up to date, or through a weak password. After the cleanup, the safest move is to hand updates, backups and monitoring to someone. On the Complete plan of my WordPress maintenance, another cleanup is included.

Your site isn’t hacked but shows a critical error or a white screen? That’s a breakdown, not an infection: see WordPress repair.

Your questions

Another question? Write to me on WhatsApp (opens in a new tab)

What should I do if my WordPress site has been hacked?

Don't delete anything in a hurry. Change the admin and hosting passwords, then have the site scanned. The malicious code has to be removed and the hole found, or the hack will come back.

How do you clean a hacked WordPress site?

Back up the infected state, replace the core, theme and plugins with official copies, remove suspicious files and accounts, then fix the hole and ask Google for a review.

How long does the cleanup take?

Longer than a simple repair, because the hole also has to be found and closed. I give you the timeline with the diagnosis, within 4 working hours.

How much does a hacked site cleanup cost?

From €150, about $165. The price depends on how far the infection goes, not on the hours, and you know it before I start.

How do I avoid getting hacked again?

Regular updates, removing unused plugins, two-factor authentication, a firewall and off-site backups. That's what a maintenance plan is for.

What should I do while I wait?

Nothing more. Don’t delete files or reinstall WordPress: that erases the traces that show how they got in. If you have a recent backup, keep it aside.

How do I give you access safely?

I’ll guide you to create a temporary admin account in my name, which you delete afterwards. No password goes by email.

What if you can’t find the cause?

You pay nothing. That’s the no fix, no fee guarantee.

Free hack diagnosis

For a faster reply, leave your WhatsApp number. I reply within 4 working hours.

Get the diagnosis Write to me on WhatsApp (opens in a new tab)

Hacked WordPress site cleanup