It helped me although my first step is not one you must take. I had a good old style pity party. I cried and railed against the evil hackers (that where probably 13 and smarter then me.) And I did before I started my site, what I should have done. And here is where I would like you to start. Learn hacked. The attractive thing about secure your wordpress website and why so many of us recommend because it is so easy to learn, it is. That is also a detriment to the health of our sites. We have to learn how to put in a security fence.
The one I recommend, and the more powerful approach, is to use one of the password creation and storage plugins have a peek here available for your browser. RoboForm is liked by people, but I think after a trial period, you need to pay for it. I use the free version of Lastpass, and I recommend it for those of you who use Firefox or this content Internet Explorer. That will generate passwords for you; you then use one master password to log in.
Harness Scanner goes seeking anything suspicious through the files on your site comment database and place tables. It informs you for plugin names. It does not remove anything, it simply warns you for potential threats.
It is really sexy to fan the flames of fear. That's what bloggers and journalists and politicians and public figures mostly do. It's terrific for readership and it brings money to the war chests. Balderdash.
Do your homework and some searching, but if you're pressed for time and want to get this try the WordPress safety plugin that I use. It is a relief to know that my site (and company!) are secure.