The cheap build fails in a familiar way: nulled theme, forty plugins, no offsite backup. Then Search Console, the host, or a customer sees a redirect. Panic-deleting files is how you destroy the only forensic copy.
Do this in order
- Snapshot files and database before you touch them.
- Rotate every password and key. Assume they leaked.
- Patch, strip plugins, lock users, add a WAF.
- Check indexation. If Google dropped you, recovery is reputational, not just technical.
That is care and malware work, not a $12 scanner. If the site sells, downtime is lost inventory. Pair the rebuild with a stack you can maintain and SEO that can recover. If you are in that week, contact us now. If you are not, look at finished work and skip the shortcut.