My first step is but it helped me. I had a good old fashion pity party. I cried and railed against the evil hackers (that where probably 13 and smarter then me) And I did before I started my website, what I should have done. And here is where I want you to start. Learn how to protect yourself until you get hacked. The beautiful thing about fix wordpress malware and why so many people recommend it is because it is easy to learn. That can also be a detriment to the health of our sites. More Help We need to learn how to put in a safety fence.
Do not depend on your internet host - Many people rely on their web host to"do all that technical stuff for me", not realizing that sometimesthey do not! Far better to have the responsibility lie with you, instead of out.
You need to create a new user, before you can delete the default admin account. To do this go to your WordPress Dashboard and click on User -> Create New User. Enter all of the information you need to enter.
Install the WordPress Firewall Plugin. This plugin investigates web requests to recognize and stop attacks.
There are always going to be risks being online (or even just being alive!) Also it's easy to get caught up in the panic. We often put the breaks on when we get caught up in the fear. This isn't a reaction that is good. Just take some common sense precautions, then forge ahead. If something check my site bad does happen, it is going to need to be addressed then and of quaking in your boots 23, no amount will have helped. If nothing does, all is good and you have not made yourself ill.