{"id":24302,"date":"2022-02-02T14:29:25","date_gmt":"2022-02-02T14:29:25","guid":{"rendered":"https:\/\/1-grid.com\/knowledge\/wordpress-how-to-clean-malware-redirects-hacked\/"},"modified":"2023-10-19T13:09:48","modified_gmt":"2023-10-19T13:09:48","slug":"wordpress-how-to-clean-malware-redirects-hacked","status":"publish","type":"ht_kb","link":"https:\/\/1grid.co.za\/knowledge\/wordpress-how-to-clean-malware-redirects-hacked\/","title":{"rendered":"WordPress: How To Clean Malware Redirects (Hacked)"},"content":{"rendered":"<div>\n<blockquote><p><span style=\"font-family: Helvetica,sans-serif;\">&nbsp;This article provides you with steps to clean your hacked website where it redirects to another spam site.<\/span><\/p><\/blockquote>\n<p>&nbsp;<\/p>\n<p><span style=\"font-family: Helvetica,sans-serif;\"><span style=\"font-size: 24px;\"><strong>Scan your WordPress Website<\/strong><\/span><\/span><\/p>\n<p><span style=\"font-family: Helvetica,sans-serif;\">&nbsp;<\/span><\/p>\n<ul>\n<li><span style=\"font-family: Helvetica,sans-serif;\">Scan your website using an online Malware scanner like <a href=\"https:\/\/sitecheck.sucuri.net\/\">https:\/\/sitecheck.sucuri.net\/<\/a><\/span><\/li>\n<li><span style=\"font-family: Helvetica,sans-serif;\">This will report on any malware added to your site so you may know where to start cleaning.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-family: Helvetica,sans-serif;\">&nbsp;<\/span><\/p>\n<p><span style=\"font-family: Helvetica,sans-serif;\"><span style=\"font-size: 24px;\"><strong>Google Safe Browsing<\/strong><\/span><strong>&nbsp;<\/strong><\/span><\/p>\n<ul>\n<li><span style=\"font-family: Helvetica,sans-serif;\">This tool that alerts the webmasters when their websites are compromised with unsafe content or malicious files. &nbsp;<\/span><\/li>\n<li><span style=\"font-family: Helvetica,sans-serif;\">You can use this tool to diagnose your website for surreptitious malware and resolve it.<\/span><\/li>\n<li><span style=\"font-family: Helvetica,sans-serif;\">Go to &nbsp; <a href=\"http:\/\/www.google.com\/safebrowsing\/diagnostic?site=\" rel=\"noreferrer\">http:\/\/www.google.com\/safebrowsing\/diagnostic?site=<\/a><strong><a href=\"\/\/example.com\">example.com<\/a> (where example.com is your website URL).<\/strong><\/span><\/li>\n<li><span style=\"font-family: Helvetica,sans-serif;\"><strong>&nbsp;<\/strong>When you press ENTER, it will provide you the Safe Browsing status of the website with the unsafe content found on your website.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-family: Helvetica,sans-serif;\">&nbsp;<\/span><\/p>\n<p><span style=\"font-family: Helvetica,sans-serif;\"><span style=\"font-size: 24px;\"><strong>Locate the Suspicious Code<\/strong><\/span><\/span><\/p>\n<p><span style=\"font-family: Helvetica,sans-serif;\">&nbsp;<\/span><\/p>\n<p><span style=\"font-family: Helvetica,sans-serif;\">In case your website is suddenly redirecting to an anonymous website(s), you need to take a look at the following areas for suspicious code:<\/span><\/p>\n<p><span style=\"font-family: Helvetica,sans-serif;\">&nbsp;<\/span><\/p>\n<ul>\n<li><span style=\"font-family: Helvetica,sans-serif;\">Core WordPress Files<\/span><\/li>\n<li><span style=\"font-family: Helvetica,sans-serif;\">Your website\u2019s index file (check both index.php and index.html!)<\/span><\/li>\n<li><span style=\"font-family: Helvetica,sans-serif;\">&nbsp;.htaccess file<\/span><\/li>\n<\/ul>\n<p><span style=\"font-family: Helvetica,sans-serif;\">&nbsp;<\/span><\/p>\n<p><span style=\"font-family: Helvetica,sans-serif;\"><span style=\"font-size: 24px;\"><strong>Removing Bad Code<\/strong><\/span><\/span><\/p>\n<p><span style=\"font-family: Helvetica,sans-serif;\">&nbsp;<\/span><\/p>\n<p><span style=\"font-family: Helvetica,sans-serif;\"><img decoding=\"async\" id=\"Picture_x0020_3\" class=\"fr-fic fr-dib fr-bordered fr-shadow aligncenter\" style=\"width: 646px; height: 393.257px;\" src=\"https:\/\/s3.amazonaws.com\/cdn.freshdesk.com\/data\/helpdesk\/attachments\/production\/33032019350\/original\/HUeC8a7zX87t2nUJpgPLpQbCYNqXoYXSgA.png?1571306356\" alt=\"https:\/\/fixmywp.com\/wp-content\/uploads\/2017\/01\/Google-url-removal-tool.png\" width=\"891\"><\/span><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<ul>\n<li><span style=\"font-family: Helvetica, sans-serif;\">In case your website has been injected with malware, you&#8217;ll need to remove the malicious scripts that caused the redirection&nbsp;to the abusive websites.<\/span><\/li>\n<li><span style=\"font-family: Helvetica,sans-serif;\">If the attackers created new pages with malicious code, you can remove them from Search Engine Results altogether by going to Google &#8216;s Search Engine Console and using the Remove URLs Feature.<\/span><\/li>\n<li><span style=\"font-family: Helvetica,sans-serif;\">Next you should update the theme, plugins, and install any new core updates that are available. Make sure everything is as up to date as possible.<\/span><\/li>\n<li><span style=\"font-family: Helvetica,sans-serif;\">This will reduce your website\u2019s vulnerabilities.<\/span><\/li>\n<li><span style=\"font-family: Helvetica,sans-serif;\">&nbsp;Finally, change all of the passwords on your website.&nbsp;<\/span><\/li>\n<li><span style=\"font-family: Helvetica,sans-serif;\">Not just the WordPress Administrator Password, you also need to reset the passwords for your FTP Account, Regenerate WordPress Salt Keys, Database(s), Hosting, and anything else related to your website to ensure the security.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-family: Helvetica,sans-serif;\">&nbsp;<\/span><\/p>\n<p><span style=\"font-family: Helvetica,sans-serif;\">&nbsp;<\/span><\/p>\n<p><span style=\"font-family: Helvetica,sans-serif;\"><img decoding=\"async\" id=\"Picture_x0020_2\" class=\"fr-fic fr-dib fr-bordered fr-shadow aligncenter\" style=\"width: 538px; height: 373px;\" src=\"https:\/\/s3.amazonaws.com\/cdn.freshdesk.com\/data\/helpdesk\/attachments\/production\/33032019351\/original\/0_Avyx5E7s_I8ycDWHs8MNnQfhQRJ_cRqQ.png?1571306357\" alt=\"https:\/\/fixmywp.com\/wp-content\/uploads\/2017\/01\/WordPress-Salt-Keys.png\" width=\"1275\"><\/span><\/p>\n<p><span style=\"font-family: Helvetica,sans-serif;\">&nbsp;<\/span><\/p>\n<p><span style=\"font-family: Helvetica,sans-serif;\">&nbsp;<\/span><\/p>\n<p><span style=\"font-family: Helvetica,sans-serif;\"><span style=\"font-size: 24px;\"><strong>Protect website from future WordPress Malware Redirects Hacks<\/strong><\/span><\/span><\/p>\n<p><span style=\"font-family: Helvetica,sans-serif;\">&nbsp;<\/span><\/p>\n<ul>\n<li><span style=\"font-family: Helvetica,sans-serif;\">Website owners can implement some (if not all) of the WordPress recommended security measures.&nbsp;<\/span><\/li>\n<li><span style=\"font-family: Helvetica,sans-serif;\">Manually implementing these measures would require some amount of technical expertise.&nbsp;<\/span><\/li>\n<li><span style=\"font-family: Helvetica,sans-serif;\">&nbsp;Instead, it\u2019s better to use WordPress security plugins like WordFence, BulletProof Security, Sucuri Security to mention a few.<\/span><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>&nbsp;This article provides you with steps to clean your hacked website where it redirects to another spam site. &nbsp; Scan your WordPress Website &nbsp; Scan your website using an online Malware scanner like https:\/\/sitecheck.sucuri.net\/ This will report on any malware added to your site so you may know where to&#8230;<\/p>\n","protected":false},"author":21,"comment_status":"closed","ping_status":"closed","template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"ht-kb-category":[27],"ht-kb-tag":[190,455,470,480,602,821,1150],"class_list":["post-24302","ht_kb","type-ht_kb","status-publish","format-standard","hentry","ht_kb_category-wordpress","ht_kb_tag-clean","ht_kb_tag-hacked","ht_kb_tag-hosting","ht_kb_tag-how-to","ht_kb_tag-malware","ht_kb_tag-redirect","ht_kb_tag-wordpress"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.0 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Wordpress: How To Clean Malware Redirects (Hacked) | 1-grid<\/title>\n<meta name=\"description\" content=\"Clean malware redirects in WordPress effectively with our step-by-step guide: 1-grid Knowledge Base\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/1grid.co.za\/knowledge\/wordpress-how-to-clean-malware-redirects-hacked\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Wordpress: How To Clean Malware Redirects (Hacked) | 1-grid\" \/>\n<meta property=\"og:description\" content=\"Clean malware redirects in WordPress effectively with our step-by-step guide: 1-grid Knowledge Base\" \/>\n<meta property=\"og:url\" content=\"https:\/\/1grid.co.za\/knowledge\/wordpress-how-to-clean-malware-redirects-hacked\/\" \/>\n<meta property=\"og:site_name\" content=\"1-grid Knowledge Base\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/1grid.co.za\/\" \/>\n<meta property=\"article:modified_time\" content=\"2023-10-19T13:09:48+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/s3.amazonaws.com\/cdn.freshdesk.com\/data\/helpdesk\/attachments\/production\/33032019350\/original\/HUeC8a7zX87t2nUJpgPLpQbCYNqXoYXSgA.png?1571306356\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@1grid_hosting\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/1grid.co.za\/knowledge\/wordpress-how-to-clean-malware-redirects-hacked\/\",\"url\":\"https:\/\/1grid.co.za\/knowledge\/wordpress-how-to-clean-malware-redirects-hacked\/\",\"name\":\"Wordpress: How To Clean Malware Redirects (Hacked) | 1-grid\",\"isPartOf\":{\"@id\":\"https:\/\/1grid.co.za\/knowledge\/#website\"},\"datePublished\":\"2022-02-02T14:29:25+00:00\",\"dateModified\":\"2023-10-19T13:09:48+00:00\",\"description\":\"Clean malware redirects in WordPress effectively with our step-by-step guide: 1-grid Knowledge Base\",\"breadcrumb\":{\"@id\":\"https:\/\/1grid.co.za\/knowledge\/wordpress-how-to-clean-malware-redirects-hacked\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/1grid.co.za\/knowledge\/wordpress-how-to-clean-malware-redirects-hacked\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/1grid.co.za\/knowledge\/wordpress-how-to-clean-malware-redirects-hacked\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/1grid.co.za\/knowledge\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"WordPress: How To Clean Malware Redirects (Hacked)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/1grid.co.za\/knowledge\/#website\",\"url\":\"https:\/\/1grid.co.za\/knowledge\/\",\"name\":\"1-Grid Domain Hosting Knowledge Base\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/1grid.co.za\/knowledge\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/1grid.co.za\/knowledge\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/1grid.co.za\/knowledge\/#organization\",\"name\":\"1-Grid Domain Hosting Knowledge Base\",\"url\":\"https:\/\/1grid.co.za\/knowledge\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/1grid.co.za\/knowledge\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/1grid.co.za\/knowledge\/wp-content\/uploads\/2023\/01\/1-grid-logo-color.svg\",\"contentUrl\":\"https:\/\/1grid.co.za\/knowledge\/wp-content\/uploads\/2023\/01\/1-grid-logo-color.svg\",\"width\":100,\"height\":100,\"caption\":\"1-Grid Domain Hosting Knowledge Base\"},\"image\":{\"@id\":\"https:\/\/1grid.co.za\/knowledge\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/1grid.co.za\/\",\"https:\/\/twitter.com\/1grid_hosting\",\"https:\/\/www.instagram.com\/1grid_hosting\/\",\"https:\/\/za.linkedin.com\/company\/1-grid\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Wordpress: How To Clean Malware Redirects (Hacked) | 1-grid","description":"Clean malware redirects in WordPress effectively with our step-by-step guide: 1-grid Knowledge Base","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/1grid.co.za\/knowledge\/wordpress-how-to-clean-malware-redirects-hacked\/","og_locale":"en_US","og_type":"article","og_title":"Wordpress: How To Clean Malware Redirects (Hacked) | 1-grid","og_description":"Clean malware redirects in WordPress effectively with our step-by-step guide: 1-grid Knowledge Base","og_url":"https:\/\/1grid.co.za\/knowledge\/wordpress-how-to-clean-malware-redirects-hacked\/","og_site_name":"1-grid Knowledge Base","article_publisher":"https:\/\/www.facebook.com\/1grid.co.za\/","article_modified_time":"2023-10-19T13:09:48+00:00","og_image":[{"url":"https:\/\/s3.amazonaws.com\/cdn.freshdesk.com\/data\/helpdesk\/attachments\/production\/33032019350\/original\/HUeC8a7zX87t2nUJpgPLpQbCYNqXoYXSgA.png?1571306356"}],"twitter_card":"summary_large_image","twitter_site":"@1grid_hosting","twitter_misc":{"Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/1grid.co.za\/knowledge\/wordpress-how-to-clean-malware-redirects-hacked\/","url":"https:\/\/1grid.co.za\/knowledge\/wordpress-how-to-clean-malware-redirects-hacked\/","name":"Wordpress: How To Clean Malware Redirects (Hacked) | 1-grid","isPartOf":{"@id":"https:\/\/1grid.co.za\/knowledge\/#website"},"datePublished":"2022-02-02T14:29:25+00:00","dateModified":"2023-10-19T13:09:48+00:00","description":"Clean malware redirects in WordPress effectively with our step-by-step guide: 1-grid Knowledge Base","breadcrumb":{"@id":"https:\/\/1grid.co.za\/knowledge\/wordpress-how-to-clean-malware-redirects-hacked\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/1grid.co.za\/knowledge\/wordpress-how-to-clean-malware-redirects-hacked\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/1grid.co.za\/knowledge\/wordpress-how-to-clean-malware-redirects-hacked\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/1grid.co.za\/knowledge\/"},{"@type":"ListItem","position":2,"name":"WordPress: How To Clean Malware Redirects (Hacked)"}]},{"@type":"WebSite","@id":"https:\/\/1grid.co.za\/knowledge\/#website","url":"https:\/\/1grid.co.za\/knowledge\/","name":"1-Grid Domain Hosting Knowledge Base","description":"","publisher":{"@id":"https:\/\/1grid.co.za\/knowledge\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/1grid.co.za\/knowledge\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/1grid.co.za\/knowledge\/#organization","name":"1-Grid Domain Hosting Knowledge Base","url":"https:\/\/1grid.co.za\/knowledge\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/1grid.co.za\/knowledge\/#\/schema\/logo\/image\/","url":"https:\/\/1grid.co.za\/knowledge\/wp-content\/uploads\/2023\/01\/1-grid-logo-color.svg","contentUrl":"https:\/\/1grid.co.za\/knowledge\/wp-content\/uploads\/2023\/01\/1-grid-logo-color.svg","width":100,"height":100,"caption":"1-Grid Domain Hosting Knowledge Base"},"image":{"@id":"https:\/\/1grid.co.za\/knowledge\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/1grid.co.za\/","https:\/\/twitter.com\/1grid_hosting","https:\/\/www.instagram.com\/1grid_hosting\/","https:\/\/za.linkedin.com\/company\/1-grid"]}]}},"_links":{"self":[{"href":"https:\/\/1grid.co.za\/knowledge\/wp-json\/wp\/v2\/ht-kb\/24302","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/1grid.co.za\/knowledge\/wp-json\/wp\/v2\/ht-kb"}],"about":[{"href":"https:\/\/1grid.co.za\/knowledge\/wp-json\/wp\/v2\/types\/ht_kb"}],"author":[{"embeddable":true,"href":"https:\/\/1grid.co.za\/knowledge\/wp-json\/wp\/v2\/users\/21"}],"replies":[{"embeddable":true,"href":"https:\/\/1grid.co.za\/knowledge\/wp-json\/wp\/v2\/comments?post=24302"}],"version-history":[{"count":2,"href":"https:\/\/1grid.co.za\/knowledge\/wp-json\/wp\/v2\/ht-kb\/24302\/revisions"}],"predecessor-version":[{"id":30480,"href":"https:\/\/1grid.co.za\/knowledge\/wp-json\/wp\/v2\/ht-kb\/24302\/revisions\/30480"}],"wp:attachment":[{"href":"https:\/\/1grid.co.za\/knowledge\/wp-json\/wp\/v2\/media?parent=24302"}],"wp:term":[{"taxonomy":"ht_kb_category","embeddable":true,"href":"https:\/\/1grid.co.za\/knowledge\/wp-json\/wp\/v2\/ht-kb-category?post=24302"},{"taxonomy":"ht_kb_tag","embeddable":true,"href":"https:\/\/1grid.co.za\/knowledge\/wp-json\/wp\/v2\/ht-kb-tag?post=24302"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}