Sign in to your account
S SecurePress customerOrdered from 2026 onwards C CuroHosting customerWith us before 2026Engineers online now
Emergency WordPress malware removal
UK engineers remove the malware, the backdoors and the Google warnings by hand, then keep it clean on our hardened servers.
Tell us where to call and what's going on. No obligation.
Rescue prices
Choose an annual plan and the cleanup is free. Your site comes back clean and stays on hardened hosting for the whole year.
Most sites
Business and brochure sites
Malware cleanup free (worth £129)
Get my site cleanedWooCommerce shops and busier sites
Malware cleanup free (worth £129)
Get my site cleanedThe £129 cleanup is paid up front, then your hosting is monthly with no contract.
On Starter, a whole year is only £46 more than the first month on monthly billing.
How it works
Call, chat or ask for a call back. We'll look at the site from the outside straight away and tell you what we can see.
Your WordPress admin and hosting (or FTP) logins. Our 24-hour clock starts the moment we have them.
Every file and the database are checked, the malware and its backdoors are removed, and WordPress, plugins and themes are replaced with clean copies.
Your clean site moves to our hardened UK servers, and we ask Google to review and lift any warnings.
What the cleanup covers
Automatic scanners miss what attackers hide best. Our engineers go through the files and the database by hand.
Injected code, hidden admin accounts, web shells and the backdoors attackers leave so they can get back in.
Spam links, injected scripts and redirect code hidden in posts, options and widgets, removed without touching your content.
Core files, plugins and themes replaced with fresh copies from the source. Nulled or abandoned plugins are flagged for replacement.
Review requests to Google Safe Browsing and Search Console, so the red warning screens and search notices come off.
Admin, database and hosting passwords changed, and WordPress security keys renewed so stolen logins stop working.
Firewall, malware scanning, account isolation and correct file permissions are in place before visitors return.
Why it happened
It's rarely personal. Bots try every WordPress site they can find, looking for one of these.
Every rescue moves onto the same hardened stack as all our hosting.
Within 24 hours of us having your WordPress admin and hosting logins, and usually much sooner. Call us and we can often start straight away.
No. We take a full copy of the site before we start, and we clean around your posts, pages, products and orders rather than wiping them.
If a site is cleaned and left where it was hacked, it's often reinfected within days through the same hole, or from other sites on the same server. Moving it onto hosting that's locked down is what keeps it clean.
On an annual plan the £129 cleanup is included free, so £199 covers the cleanup and a full year of hosting. On monthly billing the cleanup is paid up front, so the first month is £153, just £46 less than a whole year.
Your WordPress admin login and your current hosting or FTP login. If you can't get into WordPress any more, the hosting login is enough to start.
Yes. Once the site is clean we submit the review requests to Google, which usually clears the warning within a day or two.
Don't wait
Google warnings scare customers off and spam damages your search rankings. The sooner it's clean, the less it costs you.