I'm struggling with a, once hacked, Magento 1.9 webshop that somehow keeps generating malicious pages that are crawled by Google.
The client came to us as he thought the shop could be hacked. We discovered that the webshop was indeed hacked and that pretty much all necessary security patches were missing.
We first cleaned the site, installed all the patches and rechecked the webshop several times only to find out that everything was back to normal. However, starting a couple of weeks ago many "Chinese" results are appearing in the search engines.
The URL's look like - http://www.mywebsite.com/5iadl2930d9e3d.html both titles and descriptions are filled with Chinese text.
What would be the place to start and where are these URL generated from?