Wordpress sites can get hacked due to multiple reasons. They include:
- Using nulled plugins and themes.
- Using easy passwords.
- Sometimes free and original plugins and themes have security issues/vulnerabilities and due to that sites get hacked.
Now, if your site is hacked and it has viurs, its not the responsibility of hosting company to clean it for you. Other reputable companies also dont clean sites for clients and if they do, they charges hundreds of dollars for just 1 site.
Sometimes if you have 1 or 2 sites in your hosting and we are not overburdoned with support, we might clean the sites for you upon your request. But in most cases, we will refuse doing so and in that cases you can follow this guide or any other from internet or hire some one expert (freelancer) to do it for you.
If you have a basic idea of how wordpress works, you can simply follow these steps to clean your site.
1.Go to folder/document root of site. For main domain its public_html and for addon there are separate folders.
2. keep wp-content and wp-config.php and delete everything else. Copy database name, useranme, paswwod, table prefix from wp-config.php fiel and delete that file too.
3. download wordpress from wordpress.org and upload here and extract it. Data will be inside wordpress folder, move it out to site main folder.
4. Open domain in browser there will be wordpress installation page enter your database name, useranme, paswwod, table prefix that you copied from wp-config.php file
5. then login to dashbaord and go to permalinks and click save button.
6. Then scan with wordfence and at the end click the buttons: delete all deleteble files and repair all repaiarble files and scan again untill file changes and malware is not fixed.
