

Next, navigate to the wp-content directory and perform actions on these folders: It’s also a good idea to change the password of your databases once you’re done inspecting the file. Look for strange or suspiciously long strings of code and remove them. First, you will need to access the site’s files through FTP or a file manager.Įrase every file and folder in your site’s directory except for wp-config.php and wp-content.Īfterward, open wp-config.php and compare its content with the same file from a fresh installation or wp-config-sample.php that can be found on the WordPress GitHub respository. There are a few actions you can take to remove malware from your WordPress site. If the scan is successful and helps locate and remove any issues, change your FTP password and re-upload site files. Use an anti-virus system and a malware scanner such as Kaspersky or Malwarebytes to diagnose and fix possible issues in your site’s files. We suggest downloading your backup using an FTP client or with the file manager then locally running a scan on the backup. Last but not least, keep a backup of your database stored locally as well. Meanwhile, if you still have access to your site, you can use plugins such as UpdraftPlus, Backup Buddy, or VaultPress to save time. The only difference is that you’ll need to use an FTP client like FileZilla. FTP – go to Control panel -> FTP and then download the folder using the same method as used above.Once done, save it to your computer and download it. File manager – click on the site root directory and select compress.If you’re unable to login, you can save a copy of your site’s root folder via your hosting file manager or FTP. There are two ways to do this, depending on whether or not you’re locked out of your site. Always backup your site before tweaking its core files.
