# Hacked website repair: I clean it up and close the way they got in.

> Website hacked? I fix it: I clean it, close the hole they got in through and ask Google to lift the warnings. WordPress, PrestaShop, WooCommerce, from €219.

URL: https://webintacta.com/en/hacked-website-repair
Language: English (Spanish version: see the hreflang alternate of the HTML page)
Last updated: 2026-10-24

**In short:** If your website has been hacked, I (Jose Soriano, WebIntacta) clean it, find and close the hole the attacker came in through, and ask Google to remove the warnings. It costs €219 for WordPress and €349 for a PrestaShop or WooCommerce store, excluding VAT, with a 90-day guarantee: if the infection comes back, I clean it again at no cost. It is for small businesses and online stores worldwide (remote) that need their site back without losing the evidence of what happened.


If you think your website has been hacked, cleaning the files is only half the job. The other half is finding how they got in, because if that door stays open the infection comes back. I do both, and I give you a report of what was there and what I changed.

## Signs of a hacked website

- Your visitors end up on gambling, pharmacy or fake prize pages
- Google shows "This site may be hacked" or Chrome warns of a "Deceptive site"
- Pages in Japanese, or for products you don't sell, appear in Google
- Your hosting provider has suspended your account or warns you about spam being sent
- There are admin users nobody created
- .php files with odd names in the images or uploads folder

## How I do it

1. **Backup and diagnosis.** Before touching anything, I copy the site exactly as it is (it serves as evidence and as a way back) and locate everything infected: files, database, users and scheduled tasks.
2. **Cleanup.** I replace the core and the plugins or modules with their original versions, remove the backdoors and injected code, and delete the access the attacker left behind.
3. **Closing the way in.** I find the flaw they used to get in (almost always an outdated plugin or module, or a leaked password) and fix it. We change the passwords and keys together.
4. **Warnings and verification.** I request a review in Google Search Console and on any blacklists flagging you, and I scan again to confirm the site is clean.

## My website was hacked: what you can do in the meantime

1. **Don't delete anything yet.** The infected files show how they got in; deleting them blindly usually leaves the door open.
2. **Change your hosting password and the password of the email account** linked to the site, from a computer you know is clean.
3. **Ask your hosting provider for a backup from before the infection**, if they have one. Don't just restore it: restoring without closing the hole only buys you a few days.
4. **Write down what you have seen**: since when, which pages, on which device. It saves hours of diagnosis.

If you want to try it yourself, the full process is in the [guide to recovering a hacked website](https://webintacta.com/en/guides/recover-hacked-website). If you are not yet sure it is a hack, start with [how to tell if your website is hacked](https://webintacta.com/en/guides/how-to-tell-if-website-is-hacked).

## If your site redirects to another page or Google flags it as dangerous

These are two of the most common ways a hack shows itself. Malicious redirects often fire only on mobile or only when the visitor comes from Google; I explain it, with a command to check it, in [my website redirects to another site](https://webintacta.com/en/guides/website-redirects-to-another-site). Chrome's red warning or Google's "may be hacked" label go away once you clean first and then request a review: I cover it in [Google says my site is dangerous](https://webintacta.com/en/guides/google-says-site-is-dangerous). In both cases the fix is the same cleanup described on this page, with the Google review included.

## Price

Fixed price, agreed before I start. If you need your case to go ahead of the rest of my work, add priority (+€80 on WordPress, +€100 on a store): it is not a guaranteed turnaround time.

### Hacked WordPress cleanup — €219 (excluding VAT)
I remove the malware, close the way in and check that it does not come back.

$219 outside the EU.
- Files, database and backdoors
- Users and scheduled tasks the attacker left behind
- Update or replacement of the plugin or theme they got in through
- Password and key rotation (wp-config) together with you
- Review in Google Search Console and blocklists
- A report of what was there and what was done

> 90-day guarantee: if it gets reinfected, I clean it again at no cost.

**With priority: +€80** (+$80 outside the EU). Your case goes ahead of every other job, weekends too if needed. It is priority, not a guaranteed deadline.

### PrestaShop or WooCommerce cleanup — €349 (excluding VAT)
Stores: on top of the malware, checkout, overrides and customer data.

$349 outside the EU.
- Everything in the WordPress cleanup
- Checkout: skimmers and fake payment forms
- Modified overrides, modules and templates (PrestaShop)
- Guidance on breach notification (GDPR) if data was affected

> 90-day guarantee: if it gets reinfected, I clean it again at no cost.

**With priority: +€100** (+$100 outside the EU). Your case goes ahead of every other job, weekends too if needed. It is priority, not a guaranteed deadline.

Outside the EU, the same remote cleanup costs $219 for a WordPress site.

## Frequently asked questions

### How much does it cost to fix a hacked website?

A WordPress site, €219; a PrestaShop or WooCommerce store, €349. With priority over the rest of my work, +€80 on WordPress and +€100 on a store. Custom sites or other CMSs, from €390 after an analysis. All excluding VAT. The Google review is included; delisting from other blacklists is €75 extra.

### How long does it take?

It depends on how far the infection has spread and how big the site is. I give you an estimate as soon as I have the diagnosis, before starting. If it is urgent, the priority add-on puts your case ahead of the rest of my work.

### What if it gets infected again?

The cleanup comes with a 90-day guarantee: if the same problem comes back within that period, I clean it again at no cost. To keep it from coming back, what matters is closing the way in, and that is included.

### Do you need my passwords?

To clean the site, yes, I need access (hosting or FTP, and the site's admin). We agree on it beforehand and, when I finish, we change the passwords so that access no longer works.

### Will I lose content or orders?

You shouldn't. I work from a prior backup and I don't replace your content, only what is infected. On stores, I schedule the changes so sales are not interrupted.

Hire or ask (email and chat): https://webintacta.com/soporte?lang=en