Additionally, it is important to change admin username and your password if you are helped by someone with your blog and needs admin username and your password to login to do the work. Admin username and your password changes after all of the work is complete. Someone in their company may not be, even if the person is trustworthy. Better to be safe than sorry!
It helped me although my first step isn't one you must take. I had a good old style pity party. I cried and railed against the evil hackers (that where probably 13 and smarter then me) And I did before I started my website, what I should have done. And here is where I would like you to start as well. Learn hacked. The attractive thing about fix wordpress malware protection and why so many people recommend it is because it is so easy to learn. Unfortunately, that is also a detriment to the health of our sites. We need to learn how to add a safety fence.
There are ways to pull this off, and a lot of them involve re-establishing databases and much more and FTPing files, exporting and copying. Some of them are very complicated, so it's imperative that you go for the one that is best. Then you might want to look into using a plugin for WordPress backups, if you're not of the persuasion.
1 step you can take is to delete the default administrator account. This is important because get more if you don't do it, malicious user know a user name which they could attempt to crack.
If you're not currently running the latest version of WordPress, upgrade today. Like maintaining your door unlocked when you leave for vacation, leaving your site is.
Just make sure that you can schedule, and you decide on a plugin that's up to date with release and the current version of WordPress, restore and replicate.