Skip to content
Hacked website repair

Hacked website repair: I clean it up and close the way they got in.

In short

If your website has been hacked, I (Jose Soriano, WebIntacta) clean it, find and close the hole the attacker came in through, and ask Google to remove the warnings. It costs €219 for WordPress and €349 for a PrestaShop or WooCommerce store, excluding VAT, with a 90-day guarantee: if the infection comes back, I clean it again at no cost. It is for small businesses and online stores worldwide (remote) that need their site back without losing the evidence of what happened.

Reviewed by Jose Soriano ·

If you think your website has been hacked, cleaning the files is only half the job. The other half is finding how they got in, because if that door stays open the infection comes back. I do both, and I give you a report of what was there and what I changed.

Get help nowFree scan first

Mark it as urgent in the request and your case goes first.

How I fix it

In this order, and for a reason.

  1. STEP 01

    Backup and diagnosis

    Before touching anything, I copy the site exactly as it is (it serves as evidence and as a way back) and locate everything infected: files, database, users and scheduled tasks.

  2. STEP 02

    Cleanup

    I replace the core and the plugins or modules with their original versions, remove the backdoors and injected code, and delete the access the attacker left behind.

  3. STEP 03

    Closing the way in

    I find the flaw they used to get in (almost always an outdated plugin or module, or a leaked password) and fix it. We change the passwords and keys together.

  4. STEP 04

    Warnings and verification

    I request a review in Google Search Console and on any blacklists flagging you, and I scan again to confirm the site is clean.

My website was hacked: what you can do in the meantime

  1. Don't delete anything yet. The infected files show how they got in; deleting them blindly usually leaves the door open.
  2. Change your hosting password and the password of the email account linked to the site, from a computer you know is clean.
  3. Ask your hosting provider for a backup from before the infection, if they have one. Don't just restore it: restoring without closing the hole only buys you a few days.
  4. Write down what you have seen: since when, which pages, on which device. It saves hours of diagnosis.

If you want to try it yourself, the full process is in the guide to recovering a hacked website. If you are not yet sure it is a hack, start with how to tell if your website is hacked.

If your site redirects to another page or Google flags it as dangerous

These are two of the most common ways a hack shows itself. Malicious redirects often fire only on mobile or only when the visitor comes from Google; I explain it, with a command to check it, in my website redirects to another site. Chrome's red warning or Google's "may be hacked" label go away once you clean first and then request a review: I cover it in Google says my site is dangerous. In both cases the fix is the same cleanup described on this page, with the Google review included.

Price

What it costs.

Fixed price, agreed before I start. If you need your case to go ahead of the rest of my work, add priority (+€80 on WordPress, +€100 on a store): it is not a guaranteed turnaround time.

Hacked WordPress cleanup

I remove the malware, close the way in and check that it does not come back.

€219

excluding VAT$219 outside the EU

  • With priority+€80Your case goes ahead of every other job, weekends too if needed. It is priority, not a guaranteed deadline.+$80 outside the EU
  • Files, database and backdoors
  • Users and scheduled tasks the attacker left behind
  • Update or replacement of the plugin or theme they got in through
  • Password and key rotation (wp-config) together with you
  • Review in Google Search Console and blocklists
  • A report of what was there and what was done
  • 90-day guarantee: if it gets reinfected, I clean it again at no cost.
OrderPay now by card (EUR)

PrestaShop or WooCommerce cleanup

Stores: on top of the malware, checkout, overrides and customer data.

€349

excluding VAT$349 outside the EU

  • With priority+€100Your case goes ahead of every other job, weekends too if needed. It is priority, not a guaranteed deadline.+$100 outside the EU
  • Everything in the WordPress cleanup
  • Checkout: skimmers and fake payment forms
  • Modified overrides, modules and templates (PrestaShop)
  • Guidance on breach notification (GDPR) if data was affected
  • 90-day guarantee: if it gets reinfected, I clean it again at no cost.
OrderPay now by card (EUR)

Outside the EU, the same remote cleanup costs $219 for a WordPress site. All prices

Questions

What people usually ask me.

How much does it cost to fix a hacked website?

A WordPress site, €219; a PrestaShop or WooCommerce store, €349. With priority over the rest of my work, +€80 on WordPress and +€100 on a store. Custom sites or other CMSs, from €390 after an analysis. All excluding VAT. The Google review is included; delisting from other blacklists is €75 extra.

How long does it take?

It depends on how far the infection has spread and how big the site is. I give you an estimate as soon as I have the diagnosis, before starting. If it is urgent, the priority add-on puts your case ahead of the rest of my work.

What if it gets infected again?

The cleanup comes with a 90-day guarantee: if the same problem comes back within that period, I clean it again at no cost. To keep it from coming back, what matters is closing the way in, and that is included.

Do you need my passwords?

To clean the site, yes, I need access (hosting or FTP, and the site's admin). We agree on it beforehand and, when I finish, we change the passwords so that access no longer works.

Will I lose content or orders?

You shouldn't. I work from a prior backup and I don't replace your content, only what is infected. On stores, I schedule the changes so sales are not interrupted.

Contact

Tell me what is happening.

Send me the site and what you have seen. If you mark it as urgent, I read it before the rest. I reply with what I would do and a fixed price before touching anything.

I answer myself, as soon as I can and in order. Anything marked urgent goes first. Support in English is by email and chat.

Support request

Open a request with its own private link

  • Your website address and what you have seen (or what you want to hire)
  • If the site is hacked right now, mark it as urgent and I will read it first
  • I reply with the next steps and, if needed, a fixed quote before touching anything
Write to me

Is your website intact? Check it now.

Free external scan. No sign-up and nothing to install.

Get the PDF result and 30-day alerts (optional)

Data protection. Controller: Jose Soriano Castro. Purpose: to send you the diagnostic PDF, email you for 30 days if a security flaw affecting your site is published (with a follow-up scan on day 30) and reply in writing to your question; offers only if you tick that box. Legal basis: your consent. Recipients: nobody, unless required by law. You can unsubscribe at any time with the link in every email or by writing to me. Rights: access, rectification, erasure, objection, restriction and portability. Privacy policy.

  • No FTP access
  • Read-only
  • No customer data

Cookie preferences