Remove malware from WordPress
Malicious code can be located in WordPress files, custom content, database entries or server rules. Removing a single conspicuous file may therefore not be sufficient.
I check the relevant areas of the installation, remove any tampering found and document the locations.
WordPress security and technical support
★★★★★ 5,0 on Google
- Response within 4 hours
- Restoration within 6 hours; half price if exceeded
- Cleanup €280 net at a fixed price
- Money-back guarantee
Report an emergency
I will get back to you within 4 hours.
Areas that are checked
The check covers the WordPress files, the database and the configuration, insofar as the required access is available.
Database
Manipulated content may be stored in posts, options or serialized fields and is not detected by a file-only check.
Uploads directory
Executable or obfuscated files may have been placed among images and documents.
Configuration files
Altered entries in the .htaccess or wp-config.php can trigger redirects or load additional code.
Scheduled tasks
Manipulated cron entries can recreate remote files or load external content.
How the technical cleanup is performed
Check files
The WordPress core, plugins and themes are compared with the available original versions. Deviations are checked and classified.
Examine the database
The tables are searched for suspicious entries and embedded code. Serialized content is also taken into account.
Analyze logs
Where server logs are available, I check the timeframe and the possible access path of the incident.
Clean up and secure
Found malicious code is removed, the identified access path is closed and affected credentials are renewed. You receive written documentation.
Services and prices
Malware scan
plus VAT · one-time
- Assessment of files, database and server configuration
- Analysis of available access logs
- Written report with documented findings
- Recommendations for the next technical steps
If you commission the cleanup afterwards, the 50 € will be fully credited.
Cleanup
plus VAT · fixed price, scan included
- Technical assessment included in the price
- Removal of the identified malicious code
- Restoration of normal operation
- Securing the identified access route and renewing relevant access credentials
- Basic hardening of the WordPress installation
- Technical report for the insurance company on request: €200 net
Ongoing support
per month, plus VAT.
- Controlled updates for WordPress, plugins and themes
- Regular checks for malicious code
- Continuous checks for newly reported vulnerabilities
- Cleanup included in the monthly fee during the support period
Further terms and conditions:
- All prices are plus 19 % VAT.
- For work on Saturdays, Sundays or public holidays, a one-time weekend flat rate of €100 is charged.
- The agreed response and restoration times apply Monday to Friday from 8 a.m. to 8 p.m.
- The restoration period begins as soon as all required access credentials are available.
- I will clarify the effort required for multiple websites in one installation, multisite systems and WooCommerce shops with ongoing orders before starting. Additional costs will be agreed before commissioning.
Frequently asked questions
Why didn’t my security plugin report the malicious code?
Scanners detect malicious code based on various characteristics and may overlook obfuscated or unknown variants. In addition, a compromised installation can impair the functionality of a plugin running within it.
Do my contents remain intact?
Existing content remains intact insofar as it is technically sound. The WordPress core and available extensions can be replaced with clean original files; malicious components in custom content are removed selectively.
What is included in the documentation?
The documentation lists identified locations, measures carried out, the identified access path and the timeframe that can be narrowed down based on the available data.
How much does it cost?
The analysis costs 50 € net and is credited toward a subsequent cleanup. The cleanup costs 280 € net at a fixed price.
Have malicious code fully checked and removed
During the free initial consultation, we clarify the symptoms observed, the available access credentials and the sensible next step. If the cause is likely to lie outside WordPress, you will receive an appropriate assessment.
You can reach me Monday to Friday from 8 a.m. to 8 p.m. Related topics: Remove WordPress malware · Remove WordPress virus · Foreign subpages in Google’s index · Harden WordPress security
Clarify suspected malicious code
During the free initial consultation, you describe the irregularities observed and the available access credentials. I will explain whether the technical review for €50 net makes sense as a first step or whether the cleanup can begin directly.
- Technical assessment with written report€50
- Cleanup of a standard single installation€280
- Ongoing support per monthfrom €65
All prices excl. 19% VAT · Response within 4 hours, Mondays to Fridays from 8 a.m. to 8 p.m.