How to clean hacked WordPress installation

[Chris]

Hi,

I have a client hosting his website in a reseller account. His WordPress website was hacked and there were suspicious code and files added to his account. I was helping to him as we got a notice from the provider to fix this immediately. What is the best and fast way to clean hacked WordPress website.

Thanks,

[Kailash]

You should reinstall WordPress as follow to clean the website:

- First secure full backup of your data (web contents and database).

- Remove/move all existing web contents and upload the fresh WordPress files/folders by downloading them from wordpress.org

- Connect it to your existing database by updating wp-config.php file.

- Download your plugins and themes and uploaded them.

- Upload your "/wp-contents/uploads" folder. Make sure there is no suspicious files in this directory.

- After login, save your permalink structure once again.

Hope this will help you cleaning your hacked WordPress website.

- Kailash