Home Maintenance Hacked website repair
Maintenance
Hacked website repair and malware removal
Spam in Google, strange redirects or a red warning screen? We clean your site properly, find how they got in and lock the door behind them.
The short answer
If your website has been hacked, act quickly. We contain the damage, remove the malware and any backdoors, find and fix how the attacker got in, then request removal from Google’s and other blocklists. Call 0426 833 422 any time, day or night.
Signs your website has been hacked
Browser warnings
"Deceptive site ahead" or "This site may be hacked" in Google or Chrome.
Strange redirects
Visitors, especially on phones, get sent to scam or spam sites.
Spam in search results
Pages you didn't create, often in Japanese or selling pharmaceuticals.
Unknown admin users
New administrator accounts you didn't add.
Email problems
Your server sends spam, or your email starts bouncing.
Sudden slowness
Hidden scripts can use your server to mine, spam or attack others.
How we clean up a hacked website
Step 1
Contain
We take a snapshot for evidence and stop the damage spreading to visitors.
Step 2
Clean
We remove malware from files and the database, including hidden backdoors and rogue users.
Step 3
Find the way in
Usually an out-of-date plugin or a stolen password. We find it and close it.
Step 4
Harden
Updates, password resets, firewall rules and other changes so it doesn't happen again.
Step 5
Delist
We request reviews from Google and other blocklists once the site is clean.
Why cheap clean-ups get reinfected
Many clean-ups remove the visible malware and stop there. That’s why so many hacked sites are reinfected within weeks.
Sucuri’s research found backdoors on 49% of compromised sites, and malicious admin users in 55% of infected databases. If those aren’t removed, the attacker simply walks back in. A proper clean-up finds everything, then fixes the hole they came through.
Most attacks start with software that wasn’t updated. Patchstack found that heavily exploited WordPress vulnerabilities were being mass-exploited within a median of five hours of disclosure.
Cleaning up, then staying clean
The best way to pay for a clean-up is to start Maintain & Protect with the “My site is, or might be, compromised” box ticked. The setup fee is doubled (Essentials $240, Advantage $480, Elite $720 + GST), because we clean the site before we lock it down. Your monthly price stays the same.
Be honest if you think something’s wrong. If we find a compromise that wasn’t declared, we’ll need to quote for the extra work, because some of it has to be done twice.
After the clean-up, your site is covered by our hack-free guarantee: if it’s hacked again while it’s on a plan, we fix it free. It’s updated, backed up and scanned every day. See website security and secure hosting for how we keep it that way.
Start your malware clean-up now
Call us, day or night, or choose a Maintain & Protect plan and tick the compromised box.
Hacked website FAQs
How do I know if my website has been hacked?
Look for browser warnings, strange redirects, spam pages in Google, unknown admin users or email problems. Many hacks are hidden, so a scan is the only way to be sure.
What should I do first if my site is hacked?
Call us. Don’t delete files or restore old backups yourself, because that can destroy the evidence of how they got in.
How do I remove the "Deceptive site ahead" warning?
Clean the site completely, then request a review through Google Search Console. We handle both.
How long does a clean-up take?
Most sites are cleaned within a day. Getting off blocklists can take a few more days while reviews are processed.
Will my site get hacked again?
Not if the way in is closed and the site is kept updated. That’s why clean-up and ongoing protection go together.
Why does the setup fee double for a hacked site?
Because we have to clean the site before we can audit and lock it down. It’s extra work, done once.
Hacked website guides
Practical guides from our blog on the same topic.
