--- title: German School Website Malware Cleanup | Sukesh Das url: https://sukeshdas.com/project/german-school-website-malware-cleanup/ description: Removed 76,700 Japanese spam pages from Google, cleaned the malware and took back a hijacked Search Console account for a German school's WordPress site. --- [Back to portfolio](https://sukeshdas.com/portfolio/) # German School Website Malware Cleanup Removed 76,700 Japanese spam pages from Google, cleaned the malware and took back a hijacked Search Console account for a German school's WordPress site. [Get a free quoteGet a quote](https://sukeshdas.com/contact-us/) ![Google results for a German school website, before the cleanup full of Japanese spam shop pages and after showing only the real school pages](https://sukeshdas.com/wp-content/uploads/2026/10/school-site-before-after.webp) Results Spam pages removed from Google 76,700 Malware removed 100% Blacklists clean 9/9 A secondary school in Germany runs its website on WordPress. It’s where parents, students and staff find school news, events and announcements. At the school’s request, the name and address are kept private here. ## The problem The site had been hit by what’s known as the Japanese keyword hack. By the time I was called in, Google had indexed 76,700 spam pages under the school’s domain, selling everything from fountain pens to vintage synthesizers and anime posters, all in Japanese, with fake prices and star ratings. A search for the school’s own site showed a fake Japanese shop instead of school news. It got worse. The attacker had also verified themselves as an owner in Google Search Console. That let them submit their own sitemaps and push the spam into Google faster, while the school had no clear view of what was happening on its own property. ## What I did, step by step ### 1. Backup and assessment - Took a full backup of files and database before touching anything, so nothing could be lost. - Mapped the damage in Google with site searches, collecting the spam URL patterns the hack was using. - Checked how the spam was served: the pages only appeared to Google, while regular visitors saw the normal site, which is why the school hadn’t noticed. ### 2. File cleanup - Replaced WordPress core with a fresh copy from wordpress.org. - Compared every plugin and the theme against clean originals and reinstalled anything modified. - Scanned the uploads folder for PHP files hiding among images, a favourite place for backdoors. - Checked .htaccess, wp-config.php, index.php and the server root for injected redirect and cloaking code. - Removed the backdoor scripts that kept regenerating the spam pages after each deletion. ### 3. Database cleanup - Searched posts, options and metadata for injected scripts, hidden links and Japanese spam text. - Removed stray spam text that was showing on the homepage. - Deleted unknown administrator accounts created by the attacker. ### 4. Search Console recovery - Verified the school’s own ownership of the property. - Removed the attacker as an owner and deleted their verification tokens, including any HTML verification files left on the server, so they couldn’t verify again. - Deleted the sitemaps the attacker had submitted and resubmitted the site’s real sitemap. ### 5. Getting the spam out of Google - Made sure every spam URL returns a proper “not found” response instead of a page. - Submitted a temporary sitemap listing the spam URLs, so Google recrawls them quickly, sees they are gone and drops them, instead of taking weeks to find each one. - Monitored the results in Search Console until the spam stopped appearing. ### 6. Hardening - Reset all WordPress, hosting, FTP and database passwords, and generated new security keys to log everyone out. - Updated WordPress, the theme and all plugins, and removed unused ones. - Disabled file editing in the dashboard and blocked PHP from running in the uploads folder. - Set up a security plugin with a firewall and regular scans, so any new problem gets caught early. ## Before and after Before the cleanup, a Google search for the site returned page after page of Japanese product listings with fake ratings. After, all 76,700 spam pages are gone and only the school’s real pages show up. ![Google results for a German school website, before the cleanup full of Japanese spam shop pages and after showing only the real school pages](https://sukeshdas.com/wp-content/uploads/2026/10/school-site-before-after.webp) ## Where it stands The site is clean, the school owns its Search Console again, and Google shows school news and events instead of a fake Japanese store. A final external scan confirms it: no malware found, not listed on any of the 9 blacklists checked, and a low security risk rating. ![External security scan after the cleanup showing no malware found, not blacklisted and low security risk](https://sukeshdas.com/wp-content/uploads/2026/10/school-site-malware-scan.webp) Seeing strange Japanese results under your domain? [Let’s get your site cleaned up](/contact/). ## Services used on this project 2 services - [Malware cleaning and security setup Hacked, redirecting or flagged by Google? I remove the infection, find out how it got in, close that gap and request removal of the warnings.](https://sukeshdas.com/services/wordpress-malware-removal/) - [WordPress website development Custom WordPress sites on a lightweight theme, with the block editor set up the way you will actually use it and only the plugins you need.](https://sukeshdas.com/services/wordpress-web-design/) Share this project ## Project details Category Malware removal Client Confidential (German school) Industry Education Services [Malware cleaning and security setup](https://sukeshdas.com/services/wordpress-malware-removal/), [WordPress website development](https://sukeshdas.com/services/wordpress-web-design/) Timeline 1 week Location Germany ## Have a similar project? Tell me what you need. I'll respond within 4 hours. [Get a free quote](https://sukeshdas.com/contact-us/) [PreviousBrainWaves Rehabilitation](https://sukeshdas.com/project/brainwaves-rehabilitation/) [NextSupernova Sciences](https://sukeshdas.com/project/supernova-sciences/) More projects ## You might also *like.* [![Supernova Sciences website design](https://sukeshdas.com/wp-content/uploads/2026/10/supernova-sciences-phones-float-1024x576.webp) WooCommerceE-commerce ### Supernova Sciences An ongoing partnership running the brand, WooCommerce store, custom plugins, email marketing, analytics and monthly care for a… **4x** Revenue since November 2025](https://sukeshdas.com/project/supernova-sciences/) [![BrainWaves Rehabilitation website design](https://sukeshdas.com/wp-content/uploads/2026/10/brainwaves-rehabilitation-laptop-tablet-1024x576.webp) WordPressTherapy and counseling ### BrainWaves Rehabilitation A WordPress website for a Miami speech-language pathologist, with a services and pricing page, a client portal link… **96** Best practices score (Lighthouse)](https://sukeshdas.com/project/brainwaves-rehabilitation/) [![Mirritya Mundya website design](https://sukeshdas.com/wp-content/uploads/2026/10/mirritya-mundya-laptop-phone-1024x576.webp) SquarespaceLocal services ### Mirritya Mundya A Squarespace website for Mirritya Mundya, a First Nations-owned native food restaurant on the NSW South Coast, with… **100** SEO score (Lighthouse)](https://sukeshdas.com/project/mirritya-mundya/)