PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteIf your WordPress site hosted at Hostinger is redirecting visitors, showing unfamiliar content, or triggering a malware alert, preserve a copy of its files and database before making destructive changes. Then check Hostinger’s Malware Scanner if your hosting plan includes it, clean or restore the site using a method you can verify, and investigate persistence if the infection returns. A warning sign is not proof of the exact infection, and Hostinger says the original entry point usually cannot be confirmed after the fact.
How to recognize a possible WordPress infection
Unexpected redirects, unfamiliar files, obfuscated code, suspicious rules in .htaccess, broken styling in the WordPress admin area, scanner alerts, or fake verification prompts are reasons to investigate. They are warning signs, not a forensic diagnosis; a symptom alone does not identify the cause.
As an Amazon Associate I earn from qualifying purchases.
Hostinger states that “the exact entry point of a malware infection usually can’t be confirmed after the fact.” That makes it especially important to check for more than the visible symptom and to close likely entry points after cleanup.
Preserve the site and limit exposure
Before deleting files or restoring a backup, preserve the current site files and database if possible. That copy protects newer content and may help a qualified technician investigate what changed. If visitors are being redirected or served suspicious content, restrict public access while you investigate, using a method appropriate to your hosting setup.
#1 Best Overall
Keep track of recent changes and avoid deleting files simply because their names look unfamiliar. Some legitimate plugins and themes create files that are not obvious to a site owner; indiscriminate removal can break the site without removing the infection.
Choose a cleanup route
The right route depends on whether Hostinger’s scanner is available for your plan, whether you can access WordPress admin, your confidence inspecting files and database content, and whether you have a clean backup from before the infection.
| Route | Useful when | Important limitation |
|---|---|---|
| Hostinger Malware Scanner | Your Web Hosting or Cloud Hosting plan includes the tool; it can be useful even when WordPress admin is inaccessible. | Plan availability and dashboard navigation can vary; confirm the current option in your Hostinger account. A scan is not a guarantee that all persistence has been removed. |
| Security plugin | You can access WordPress admin and want to start cleanup with a plugin Hostinger names, such as Wordfence or Anti-Malware Security. | A plugin scan or cleanup is not a guaranteed complete cure, particularly if malware persists outside the files it checks. |
| Manual cleanup | You have the technical ability to compare files, verify checksums, and inspect the database and relevant directories. | Incorrect edits or deletions can damage the site, and visible files are not the only possible persistence location. |
| Restore files and database | You have a clean backup from before the infection and can accept losing changes made since that backup. | A full restore replaces both website files and database content with the selected backup state. |
| Hostinger paid cleanup | Other cleanup attempts have failed and your WordPress site may meet Hostinger’s eligibility conditions. | Hostinger says eligible sites must have a domain pointing to Hostinger. Confirm current eligibility, terms, and price before requesting service. |
Check Hostinger’s Malware Scanner
Hostinger documents its Malware Scanner for Web Hosting and Cloud Hosting plans. The scanner is accessed through the Hostinger dashboard rather than only through WordPress, which can help when the WordPress admin area is unavailable. Because plan availability and dashboard labels may change, check your account for the current scanner location and access.
Recommended Free Tools
Review the scan results and follow the tool’s remediation options where available. Do not treat a clean result as proof that every suspicious account, database entry, or other persistence mechanism has been addressed.
Clean files and WordPress components carefully
Use a plugin if WordPress admin is available
Hostinger names Wordfence and Anti-Malware Security as plugin options for malware removal. Use a reputable plugin obtained from a trusted source, review its findings, and retain a copy of the site before applying destructive changes. Plugin-based cleanup may be easier to start than manual inspection, but it cannot be assumed to find or remove every infection.
Use manual cleanup only if you can verify changes
Hostinger’s tutorial describes reinstalling and comparing WordPress core files, checking file checksums, and inspecting files such as PHP files in the uploads directory. Those actions require care: legitimate site customizations and plugin files can be mistaken for malware. If you cannot distinguish expected files from suspicious changes, pause and get experienced help rather than deleting unfamiliar items.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.If the malware returns, check for persistence
When an infection reappears after visible files have been cleaned, investigate other places malware or unauthorized access may persist. Hostinger identifies several checks:
- Review WordPress administrator accounts and remove accounts you cannot identify or authorize.
- Generate new authentication keys so existing authentication cookies are invalidated.
- Inspect
wp-content/mu-pluginsfor unexpected must-use plugins. - Consider whether suspicious content remains in the database, not just in website files.
Changing a password or deleting a single suspicious file does not necessarily address all of these locations.
Best Value
Restore from a backup only when its trade-off is acceptable
Hostinger’s full WordPress restore returns both files and database to a selected date. Choose a point before the likely infection, and preserve a current copy before restoring. The restore can overwrite newer posts, orders, comments, or other changes, depending on what your site stores in its database and files.
When using a restore to clear a persistent infection, Hostinger advises restoring files and database together from the same backup point. Afterward, check the site and update its software and credentials rather than assuming the backup alone has removed the conditions that allowed compromise.
Reduce the chance of another infection
- Update WordPress core, themes, and plugins.
- Remove untrusted, cracked, or unlicensed themes and plugins.
- Use strong, unique passwords for WordPress and hosting accounts.
- Protect forms against abuse.
- Keep backups that are separate from the live site and confirm that they can be restored.
- Scan the computer used to access the website, since compromised devices can expose credentials.
When to ask Hostinger for help
If malware persists after cleanup or a careful restore, Hostinger says eligible WordPress sites whose domain points to Hostinger can request paid site cleanup. Confirm that your site qualifies and check the current service terms and cost with Hostinger before proceeding.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
