Hacked: Website Being Cloaked

[ParLawGod]

Novice here.

A few weeks ago, my WordPress was the victim of a backdoor attack. The hacker also got access to my Google site verification. I was able to remove the malicious code, fix issues in phpmyadmin, add protection to my blog, and get them removed from my Google site verification. Everything looks fine on the surface.

PROBLEM: Google still shows that my website is being "cloaked."

http://webcache.googleusercontent.co...nt=firefox-b-1

I can't find out how or why this is still happening. Way above my ability level unfortunately. Any advice on how to proceed forward? I'm not even sure where to look to locate the problem...

[HTMLBasicTutor]

I dealt with this relatively recently for a client.

Once I cleaned up the issues I told her to go into her Google Search Console account and look for any "You have been hacked" messages and click/submit anything available in there to indicate fixed. Here you go, scroll down to "To investigate hacking or malware using Search Console" - Google Web Fundamentals Guides

Then we just waited for Google to clean up their index.

[ParLawGod]

Thank you for responding! I gave that a try...and Google came back that my website is "not quite ready for reconsideration." Also received the message below:

Google has reviewed your site in response to your reconsideration request. Based on this review, Google believes that there is still content on your site that was added by a hacker. The hacked content might be hidden and difficult to find. We recommend that you review the information below for steps to uncover any hidden content and successfully clean your site. Once you have cleaned up the hacked content, please file another reconsideration request. We’ll evaluate your site again to determine whether or not it’s been successfully cleaned.

No clue what to do next...

[HTMLBasicTutor]

Did you look for files edited prior to you fixing the site? Index page? .htaccess? Javascipt files?

[ParLawGod]

I did...thought I got everything.

[HTMLBasicTutor]

If your site uses a database you should look into SQL injection fixes.

[ParLawGod]

Hmmm - that's above my ability level (unfortunately). I'll probably have to look at hiring someone

[itarachiu]

Originally Posted by ParLawGod

Hmmm - that's above my ability level (unfortunately). I'll probably have to look at hiring someone

If u installed some malicious addons in wordpress then that's the reason. Use only trusted addons and trusted themes ONLY. Some of them contain backdoors, make some research on google and identify which one has backdoor if not maybe you got a virus something and somebody somehow get access to your username/passwords.