It's also important to change your password and admin username if someone needs admin username and your password to login to do the work and helps you with your site. Admin username and your password changes, after all of the work is finished. Someone in their business may not be if the man is trustworthy. Better to be safe than sorry!
My first step isn't one you have to take but I was helped by it. I had a good old fashion pity party. I cried and railed against the evil hackers (that where probably 13 and smarter then me.) And I did before I started my website, what I should have done. And here is where I want you to start. Learn hacked. The thing about fix wordpress malware virus and why so many people recommend it is because it is easy to learn. Unfortunately, that can also be a detriment to the health of our websites. We have to learn how to pop over to this web-site add a safety fence.
The one I personally recommend, and the stronger approach, is to use one of the password creation and storage plugins available for your browser. I believe after a trial period, you need to pay for it, although RoboForm you could check here is liked by people. I use the free version of Lastpass, and I recommend it for those who use Internet Explorer or Firefox. That will generate passwords for you; then you use one master password to log in.
Keep control of your online assets - Nothing is worse than getting your livelihood in someone else's hands. Why take chances with something as important as your site?
You could get an SSL Encyption Security to your WordPress blogs. The SSL Security makes secure and encrypted communications with your site. You can also keep the all the cookies and history of communication so that all transactions are listed. Be certain that all your sites get SSL security for protection.
Do your homework and some searching, but if you're pressed for time and want to get this try out the WordPress safety plugin that I use. It's a relief to know that my site (and business!) are secure.