Fix a malware-infected WordPress website at Hostinger by identifying signs of infection, removing malicious content, and preventing future attacks.<\/p>
There are a few things to look for that can indicate a potential malware infection:<\/p>
Unexpected deny rules on your .htaccess file.<\/p>\n<\/li>\n
Files on your website’s root folder that you did not create either manually or via a custom script\/cron job.<\/p>\n<\/li>\n
Files such as index.php containing large amounts of unreadable code.<\/p>\n<\/li>\n
Your WordPress admin page does not load the style properly.<\/p>\n<\/li>\n
Your website is redirected to another site which you don’t recognize<\/p>\n<\/li>\n
Our Malware Scanner has identified and removed compromised or infected files<\/p>\n<\/li>\n<\/ul>
At Hostinger, on our Web Hosting and Cloud Hosting plans, we have an automatic Malware Scanner<\/a> that will help identify and remove malicious files on your account.<\/p> If you want to clean up your website manually, you can use security plugins such as WordFence<\/a> or Anti-Malware Security<\/a>. Here’s a step-by-step tutorial on how to clean up an infected WordPress site using the WordFence plugin: WordPress Malware Removal Guide<\/a>.<\/p>\n<\/div> If your website presents issues after cleanup<\/b>, you can consider restoring it from a backup<\/a>. Please note that this would revert any changes you made after the backup date.<\/p> Malware that returns shortly after you remove it usually persists somewhere other than your website files, such as your database, a hidden WordPress user account, or a browser login cookie. Complete the following steps to remove a persistent infection:<\/p> Contact Hostinger support<\/a> about a paid malware cleanup if the infection returns after completing these steps.<\/p> NOTE<\/strong><\/p> Keep in mind that only removing the infected files may not be enough<\/b> to contain the infection. It is very important that you tackle the reason <\/b>why the infection occurred in the first place. In order to eliminate any vulnerabilities and keep your websites safe, please do the following steps:<\/p> Use strong passwords: unique, with more than 8 characters using letters, numbers, and special characters<\/p>\n<\/li>\n Keep WordPress<\/b>, <\/b>themes, and plugins updated<\/b> to the latest stable version<\/b><\/p>\n<\/li>\n Avoid plugins and themes from unknown or third-party providers<\/b><\/p>\n<\/li>\n Protect your website’s contact\/registration\/login forms with reCAPTCHA<\/a><\/p>\n<\/li>\n Generate and download backups of your website periodically<\/a><\/p>\n<\/li>\n Scan your local device with an antivirus software such as Malwarebytes<\/a><\/p>\n<\/li>\n<\/ul>Remove malware that keeps reinfecting your WordPress website<\/h2>
\n
\n
Prevent future infections<\/h2>
\n