Urgent · Compromised site
Hacked website recovery and malware cleanup
If your website is redirecting somewhere strange, showing content you didn't put there, or has been flagged as unsafe, send me the domain and tell me what you're seeing.
I'll first work out what information and access are needed, explain what I can help with, and tell you the sensible next step. If proper investigation is required before the full scope can be known, I'll make that clear before proceeding.
What I can do
- Investigate the signs of compromise and identify what can reasonably be established
- Remove injected content and malicious files where they can be safely removed
- Restore from a known clean backup where one exists and is suitable
- Fix or reduce identifiable security weaknesses related to the incident
- Put sensible hardening, backups and monitoring in place afterwards
What I'll need from you
- The domain and a description or screenshot of what you're seeing
- Hosting or control-panel access when it becomes necessary for the work
- Any backups you have, or information about where backups are stored
- Any warnings, emails or security notices you've received about the incident
What I won't tell you
That your website can never be hacked again. Nobody can honestly promise that.
What I can do is remove or contain the current problem, address the security issues I can identify, improve the site's protection, and put better backups and recovery measures in place so a future incident is easier to deal with.
How long it takes
It depends on what has happened, how the site is built, the condition of the hosting environment, and what access and backups are available.
I'll give you a realistic estimate once I understand enough about the problem — not make up a recovery time before I've seen it.
After the site is back
Recovery is a one-off job. If you'd rather not think about updates, backups and monitoring again, that's covered by website care and technical support — the ongoing service this page sits under.
Related: websites & web development if the site needs rebuilding rather than repairing.
Website hacked or behaving strangely?
Send me the domain and tell me what you're seeing.
I'll tell you what information I need next and whether it's something I can help with.