The problem
This is one of the most common jobs I get. The owner opens the site and it looks fine. But patients on their phones, or visitors coming from Google, get sent to a gambling or pharmacy-spam page. Sometimes Google shows a “This site may be hacked” warning in search results.
What I do
- Take a full backup before touching anything
- Find and remove the malicious code, fake pages and rogue admin users
- Update WordPress, the theme and every plugin, and remove the ones nobody uses
- Change passwords and add a firewall and login protection
- Ask Google to review the site so warnings are removed
The owner usually can’t see the problem on their own computer. That is why it can run for months.
The result
The site is clean, up to date and much harder to break into again.







