I have a woo-commerce shop on my wordpress but I've been attacked by some kind of hack. As you can see in the image there are lots of popup link on top of my site . How can I clean this ? I do not have any backup . thanks
closed as off-topic by Howdy_McGee♦, Nicolai, Mark Kaplun, markratledge, Pieter Goosen Feb 10 '16 at 18:06
This question appears to be off-topic. The users who voted to close gave this specific reason:
- "Questions that are too localized (such as syntax errors, code with restricted access, hacked sites, hosting or support issues) are not in scope. See how do I ask a good question?" – Howdy_McGee, Nicolai, Mark Kaplun, markratledge, Pieter Goosen
Without a backup, cleaning up something like this can take a while. Each hack is different and can hide in multiple locations. If you have admin and FTP access these are the things I would change:
Change all the passwords for every account on the backend. I would also look into setting up a Cloudflare account as it can help add an extra layer of security.
Limited Login Attempts: It'll prevent bruce force entry.
Wordfence: Install it and have it run a scan on the site and directories. It should return any file that has been modified or is out of date.
Cleaning up a hack is time consuming and if you are unfamiliar with working with a text editor and FTP, you might want to hire someone.