Step 1

The first step for us is to examine the core WordPress files of your site. We can find, remove and replace any injected PHP files among the core files, and any infected code that has been placed in the core files.

Step 2

The second thing for us to do is analyse all of the content in your site. This includes any plugins or themes installed, and the files in your uploads directory. Any damaged plugins will either be cleaned, or replaced.

We may need the original files from you if a premium plugin or theme is damaged, and the files aren’t available in the free WordPress repository. If you can’t find the original files, we should be able to get them for you, but you may incur a small fee.

Step 3

At this point, your site is almost clean! However, lots of other WordPress technicians don’t scan the database for dangerous URLs or suspicious content. 

If we do find anything of caution in the database, we will, of course, remove it.

Step 4

Our final step is to help prevent your site from becoming infected again in the future.

To do this, we install a professional Web Application Firewall (WAF), and Security Scanner on your site.

We install industry leading internal WordPress scanning software, so you can easily check core files, themes and plugins for malware, bad URLs, backdoors, SEO spam, malicious redirects and code injections.

We also install a WAF that runs at the endpoint of your site, to integrate deeply with WordPress to identify and block malicious traffic.

We can guarantee that with this software installed, and our tips taken on board, your site will not be come infected again!

In the rare occasion that your site becomes infected again within a month after our malware removal service, we will clean your site again, free of charge.

In order to stay malware free, you must keep your site and all of its plugins up-to-date. If you would prefer us to do this for you, check out our Maintenance Package here!