There are a few things to look for that can indicate a potential malware infection:

  • Unexpected deny rules on your .htaccess file

  • Files on your website's root folder that you did not create either manually or via a custom script/cron job

  • Files such as index.php containing large amounts of unreadable code

  • Your WordPress admin page does not load the style properly

At Hostinger we have an automatic Malware Scanner on your hPanel that will help identify and remove malicious files on your account, so you will not need to worry about malware infections.

In case Malware Scanner is not available yet on your panel or if you want to manually clean up your website, you can use security plugins such as WordFence or Anti-Malware Security.

You can find a step-by-step tutorial on how to clean up an infected WordPress site using the WordFence plugin here: WordPress Malware Removal Guide

If your website presents issues after cleanup, you can consider restoring it from a backup. Please note that this would revert any changes you had made after the date of the backup.

To avoid similar issues in the future, we recommend the following:

  • Use strong passwords: unique, with more than 8 characters using letters, numbers and special characters

  • Keep WordPress, themes and plugins updated to the latest stable version

  • Avoid plugins and themes from unknown or third-party providers

  • Protect your website's contact/registration/login forms with reCAPTCHA

  • Generate and download backups of your website periodically

NOTES:

Did this answer your question?