If your WordPress site was hacked once, the job is not finished just because the homepage loads again. That is the mistake site owners make over and over. Visible cleanup is not the same thing as removing persistence, closing the access path, rotating compromised credentials... (Read more)