SoakSoak Malware Removal Guide for WordPress Websites
SoakSoak Malware Removal Step By Step Guide:
This malware has infected numerous websites across the WordPress platform. To get rid of SoakSoak malware, you need to follow these steps.
- Change your all Hosting, FTP and WordPress Login Passwords. (If possible i would recommend also to change your Database Password)
- Login to your hosting and remove these files (wp-includes/template-loader.php and wp-includes/js/swobject.js)from your WordPress installation since these are infected. The wp-includes/template-loader.php basically has that code that is injecting itself into the wp-includes/js/swobject.js
- Now download fresh WordPress version from their official WordPress website, unzip it, and copy both these files from the wp-includes folder and upload these two files in the respective places from where you have deleted these files.
By following above guide, you can get rid of this bad SoakSoak Malware. After cleaning the website, you can submit your website to Google for review from Google Webmasters Tools that you have removed that malware. Google will review your website in 24 hours (in my case it took 6 hours) and if this malware is not found, Google will lift the warning from your website. Also follow these guidelines to make your WordPress Security more secure. If you have any questions to ask or suggestions about this malware, feel free to ask and share here. And if you are still failed to clean it, You can take my services. I will clean it for you.