Hackwacht: check WordPress and clean it with one click

Hackwacht checks WordPress sites hosted at Netslim. You can find it in your account under Hackwacht. You can run a single check at any time, once every 6 hours. With the subscription we check every day and you clean up with one click.

What we check

• Every file of WordPress itself, compared with the official checksums from WordPress.org for your version, and PHP files in wp-admin and wp-includes that don't belong there.
• Plugins from WordPress.org, file by file. Premium or custom plugins and your theme we scan for known signs of malware.
• PHP files in uploads (PHP never belongs there; empty index.php files from plugins don't count), unknown files in mu-plugins and suspicious files in the root folder.
• Your homepage as a visitor and as Googlebot: spam words and cloaking (Google sees something different).

Cleaning

1. First we make a backup of the current state.
2. WordPress itself is restored to the original of the same version and language. wp-content stays in place.
3. We reinstall modified plugins in the same version from WordPress.org. Your settings are in the database and are kept.
4. We move suspicious files to the folder nsl-quarantaine next to your website (outside the web folder). Nothing is thrown away.
5. We check again and email you what happened.

What Hackwacht does not fix

Malicious code in the database, a stolen password or a hole in an outdated plugin. After a hack, always change the passwords of your administrators and keep plugins up to date. If files from your theme were quarantined and your site looks different, let us know.