Home › Website hacked
A dark room lit by the red glow of a laptop screen
When Something’s Broken · 03

“This site may harm your computer”: the red screen that empties your booking calendar.

Chrome is showing your patients a warning normally reserved for criminals. Your developer is on vacation three time zones away. The backup plugin last ran in March. Every hour the warning stays up, trust you spent years building is bleeding out.

Short answer: Contain, clean, then request review — in that order. Take the site behind a maintenance page, change every credential, restore or clean the files, patch the hole it came through, then ask Google for a security review. The warning typically lifts within days of a genuinely clean site — not before it is genuinely clean.

The sequence, for a non-technical owner

  • 1. Contain. Ask your host to enable a maintenance page. Change hosting, admin and database passwords immediately — the attacker may be watching you clean.
  • 2. Identify entry. Nine times out of ten: an outdated plugin/theme, a weak admin password, or a compromised computer. Your host’s support can usually point to the infected files and dates.
  • 3. Clean or restore. A pre-infection backup is fastest — if it exists and the entry hole is patched before restoring. Otherwise the host’s malware-removal service or a reputable cleanup firm. Beware $50 miracle cleaners; reinfection is their business model.
  • 4. Patch and harden. Update everything, remove unused plugins and old admin accounts, enable two-factor on hosting and CMS.
  • 5. Request review in Search Console’s Security Issues section. Reviews of genuinely clean sites usually clear in days. Requesting review of a still-infected site wastes the attempt.
While the warning is up: your booked customers need a plain email or SMS — “our website has a technical issue, our phone lines are open, your appointment stands.” Most businesses forget the humans mid-crisis. The ones that do not, keep them.

Questions people ask

How do I remove the Google malware warning from my site?

Clean the site fully first - contain, change credentials, remove the malware, patch the entry point - then request a security review in Search Console. Clean sites typically clear in days; premature requests waste time.

Can I fix a hacked website without a developer?

Often yes, with your hosting company's help: they can isolate infected files, restore backups and enable maintenance mode. The order of operations matters more than deep technical skill.

Why does my site keep getting reinfected after cleaning?

Because the entry point was never patched - usually an outdated plugin, a weak or reused password, or a leftover admin account. Cleaning without hardening is an invitation to return.

How do I remove the Google malware warning from my site?

Clean the site fully first - contain, change credentials, remove the malware, patch the entry point - then request a security review in Search Console. Clean sites typically clear in days; premature requests waste time.

Can I fix a hacked website without a developer?

Often yes, with your hosting company's help: they can isolate infected files, restore backups and enable maintenance mode. The order of operations matters more than deep technical skill.

Why does my site keep getting reinfected after cleaning?

Because the entry point was never patched - usually an outdated plugin, a weak or reused password, or a leftover admin account. Cleaning without hardening is an invitation to return.

Send us what you’re seeingRun the 60-Second Checkup

Scenarios are composites built from real, common situations — not client stories. We publish no metrics we cannot prove.