Website cleanup service needed

Forums › IT Pro and developers › Website cleanup service needed

1 | 2

wpcharged

18 posts

Geek
+1 received by user: 4

#2347954 4-Nov-2019 09:51

Happy to help if you still need this fixed.

Unless files have been deleted a back up should generally be avoided. Websites are often hacked for some time before becoming noticed, and there's no way to tell if a backup is clean. It's better to clean and identify the malicious files, and if possible plug the vulnerability that lead to the compromise.

Once everything has been cleaned and you're sure the malicious URL no longer exists the site will need to be submitted for a security review in Google's Search Console.

hairy1

3352 posts

Uber Geek
+1 received by user: 644

ID Verified

Trusted

Lifetime subscriber

#2348059 4-Nov-2019 12:17

Another option if @wpcharged is too busy this guy will sort you. I use his service to manage my Joomla sites:

https://mysites.guru/

Recommended.

My views (except when I am looking out their windows) are not those of my employer.

Groucho

542 posts

Ultimate Geek
+1 received by user: 216

#2348067 4-Nov-2019 12:41

mattwnz:

Are they not using some form of wordpress security plugin Wordfence?

I inherited a small number of Wordpress sites and am far from a Wordpress guru however my tool of choice is also Wordfence (free edition). It's pretty powerful with continual monitoring of suspicious activity as well as blocking confirmed hack attempts.

mattwnz

20515 posts

Uber Geek
+1 received by user: 4795

#2348086 4-Nov-2019 13:29

Groucho:

mattwnz:

Are they not using some form of wordpress security plugin Wordfence?

I inherited a small number of Wordpress sites and am far from a Wordpress guru however my tool of choice is also Wordfence (free edition). It's pretty powerful with continual monitoring of suspicious activity as well as blocking confirmed hack attempts.

I use that too, it seems to be okay apart from all the alert emails I end up getting. The number of attempted hacks it has blocked are huge. Last email said it had blocked 2000 attacks out of china on the site .

Groucho

542 posts

Ultimate Geek
+1 received by user: 216

#2348096 4-Nov-2019 14:02

mattwnz:

Groucho:

mattwnz:

Are they not using some form of wordpress security plugin Wordfence?

I inherited a small number of Wordpress sites and am far from a Wordpress guru however my tool of choice is also Wordfence (free edition). It's pretty powerful with continual monitoring of suspicious activity as well as blocking confirmed hack attempts.

I use that too, it seems to be okay apart from all the alert emails I end up getting. The number of attempted hacks it has blocked are huge. Last email said it had blocked 2000 attacks out of china on the site .

You could always spend the half hour going through all the configurable options where many of those email notifications can be disabled? One feature I only recently discovered it has is enables backend login protection with Invisible ReCaptcha as all the plugins I've used over the years to add some form of 'bot' test get discontinued.

Ford

330 posts

Ultimate Geek
+1 received by user: 2
Inactive user

#2379849 22-Dec-2019 11:58

freitasm:

I've reported to the owner via Contact Us page, reported to CERT NZ... Still there, after nine months.

CERT don't take action on anything. I tried reporting a ransomware attack to them but they just sent me a standard reply.

New World

Shop on-line at New World now for your groceries (affiliate link).

freitasm

BDFL - Memuneh
80653 posts

Uber Geek
+1 received by user: 41045

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2379850 22-Dec-2019 11:59

Ford:

freitasm:

I've reported to the owner via Contact Us page, reported to CERT NZ... Still there, after nine months.

CERT don't take action on anything. I tried reporting a ransomware attack to them but they just sent me a standard reply.

Yes, sometimes I think about it like that. In theory if you report something they will contact the site or service owner - they won't tell you anything for privacy reasons though. If the website or service owner ignore the CERT and other reports, that's not on CERT but on the owner.

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

1 | 2