I have had two WordPress blogs hacked into in the past. That was at a time when I was doing very little internet marketing, and until I found time to address the situation (months later), these sites were penalised in the search engines. They were not removed, but the rankings were reduced.
In my view, the best way to ensure that your fix wordpress malware that is is via the use of a WordPress backup plugin. This is a fairly inexpensive, elegant and easy to use way to make certain your website is accessible to you in case of a disaster.
A simple way would be to use a few built-in tools. First of all, do not allow people run a web host security scan to list the documents in your folders and automatically backup your web hosting account.
Keeping your important source WordPress site up-to-date is one of the simplest things you can do. For the past couple of versions, the ability to install updates has been included other by WordPress. A new upgrade becomes available.
It's really sexy to fan the flames of fear. That is what journalists and bloggers and politicians and public figures do. It's terrific for more helpful hints readership and it brings money to the war chests. Balderdash.
Do not use wp_ as a prefix for your own databases. Most web hosting providers are currently eliminating that default now but if yours doesn't, adjust wp_ to anything else but that.