A site is serving a fake CAPTCHA to visitors.
- Core-file integrity finds a changed file and the time it changed.
- Alert to you with the file, the diff and the plugin that let it in.
- Over SSH we help clean it: file replaced, unknown admin removed, plugin updated, restore point before each step.
Cleanup help, never a guarantee it stays clean.