Do not panic and do not delete everything. Take the site offline if needed, change all passwords, keep a copy for analysis and contact us. We remove malware and backdoors, patch the hole and request reviews from the host and Google.
What to check
- Preserve a copy and logs before destructive changes.
- Revoke exposed access and isolate affected services where possible.
- Remove persistence, patch the entry point and verify recovery before review requests.