Someone hacked my site and Google has dropped it from index

[Automotive site]

Today I got a message from Google that one of my sites had been hacked and indeed I am seeing lots of hidden text at the bottom of each page when I look at the source code.

The site is a wordpress blog. How can I get rid of this text? It appears on every page.

I can only resubmit for inclusion after gettiong rid of this text. I have very limited coding knowledge. Also, what can i do to prevent this from heppening in the future.

I should have made a backup in the last few days so I could have restored to a previous state before this happened, but my last backup was probably weeks ago since when I have added lot of content.

Thanks for any help and suggestions.

[bill]

We have a number of threads about WordPress being hacked [google.com]. Some of them have tips on securing your site to prevent this.

[tangor]

Sad thing, Automotive site, is the research to prevent this was not done before the hit. You can recover, but it will take time.

How big is the site? Can you wipe and start from scratch AFTER learning how to secure... and installing the latest version? Can you keep on top of all updates to the software? No easy answers to your question. Wishing all the best!

[Oimachi2]

Hi There,

I suspect you had an SQL injection, probably the fault of the hosting company. This once affected over a dozen of my websites, I got them all fixed up no problem.

You need to remove the code from every index.php of your Wordpress installation, that includes all extensions.

[edited by: bill at 4:36 am (utc) on Nov. 20, 2009]
[edit reason] see sticky [/edit]