Hacked WordPress cleanup
I remove the malware, close the entry points and hand your site back working just like before. With a PDF report and a 30-day guarantee.
Free assessment, no obligation. You only pay if you approve the quote.
Delivery report
bakery.example.com
Signs of a hack
If your site shows at least one of these signs, it has probably been hacked. The sooner it's cleaned, the less damage on Google and with your customers.
Visitors land on gambling, pharmacy or adult pages.
The browser shows "This site may be hacked" or "Deceptive site ahead".
Japanese text or products you don't sell show up under your domain.
There's a user in the WordPress dashboard that nobody created.
You got a malware notice and the site went offline.
Messages from your domain are now blocked or rejected.
Files, pages or pop-ups appeared that nobody put there.
The server is overloaded sending spam or attacking other sites.
Send the site address and what's happening.
How it works
Everything over WhatsApp, with a fixed price agreed before I start.
Use the green button anywhere on this page.
Send the site address and what's going on, accept the access authorization and give me a WordPress administrator user. I assess it and tell you what I found.
You get the recommended plan, the fixed price and a step-by-step of what I'll do.
Once the upfront payment clears, you send me the hosting and database access, and the work begins.
Every site goes through the same checklist: backup, rebuild, database, hardening and Google.
A clean site, a PDF report and guidance. Then you pay the other 50% and the guarantee starts.
This is not an emergency service. The timeline starts once the upfront payment and all access details arrive. I work from Brazil (UTC−3).
What I do
Automatic scanners look for known malicious code and miss the new variants. I do the opposite: I rebuild WordPress from official sources and keep only what is proven clean.
A full copy of the site as it is, stored off the server. Nothing gets lost.
Original core on the same version, verified against the official checksums.
Reinstalled from official sources. Pirated and abandoned plugins go away.
I find and remove the back doors in the places where attackers usually hide code.
Injected scripts, spam and ghost administrators removed.
Every password and key rotated, sessions closed, updates and 2FA.
SEO cleanup: spam pages removed from Google, Search Console reviewed and a review request for the red warning.
Everything that was found and done, and what's left for you.
A real example of the document you get on delivery, with fictional data.
Open the sample report (PDF)Pricing
You know the price before I start. No hourly billing.
For business sites, blogs, landing pages and portfolios.
US$149
Up to 2 business days. Usually the same day.
For WooCommerce stores, multisite, custom themes and several sites on the same hosting account.
US$399
Up to 5 business days.
Payment: 50% to start and 50% on delivery. We agree on the payment method on WhatsApp.
Extended support (optional): 30 more days of guarantee and support for US$ 50 on the Complete and US$ 130 on the Complex.
Not sure which plan fits? Message me and I'll tell you in the free assessment.
Guarantee
The guarantee starts on delivery and applies when:
Want more time? Extended support adds 30 more days of guarantee and support, for 60 days in total.
Before you message
A full stack developer specialized in WordPress, PHP and Linux servers, based in Brazil. I work alone: the person who answers on WhatsApp is the person who cleans your site, start to finish. Nothing is outsourced.
FAQ
For the free assessment, only a WordPress administrator user. You can create one just for me and delete it later. I only ask for hosting, FTP and database access after the 50% upfront payment. Before any access, you accept the access authorization, and every password is changed on delivery.
No problem. The first thing I do is a full backup of the site as it is. The rebuild uses official WordPress sources, so it doesn't depend on an old backup. Only content the attacker deleted can't come back without an earlier copy.
The Complete Cleanup takes up to 2 business days, and most sites are done the same day. The Complex Cleanup takes up to 5 business days. The timeline starts once the upfront payment and all access details arrive.
After the cleanup I send the review request through Search Console. The timing is Google's: usually a few days for malware and a few weeks for search spam.
Within 30 days of delivery I clean it again for free, under the guarantee conditions. After that, you can add 30 more days of extended support.
Yes, through the Complex Cleanup. On WooCommerce I also check the checkout for code that steals card data, the orders and the customer data.
Half to start and half on delivery. We agree on the payment method on WhatsApp.
Because that's where my experience is, and because it's the most attacked website platform on the internet. Focusing on one platform is what makes a fixed price and a checklist that skips nothing possible.
The assessment is free and with no obligation. You only pay if you approve the quote.
Message me on WhatsApp