In my opinion, the best way to make sure your fix wordpress malware fix that is is via the use of a WordPress backup plugin. This is a relatively inexpensive, easy and elegant to use way from this source to be sure your site is accessible to you.
Use strong passwords - Do what you can to use a password, alpha-numeric, with upper and lower case and special characters. Easy to remember passwords are also easy to guess!
You first must create a new user with administrator rights before you can delete the default admin account. To do this go to your WordPress Dashboard and click on User -> Create New User. Enter all of the information you need to enter.
Security plug-ins can be considered as a security checker that was complete. They check and scan the whole site and give you information concerning the weaknesses of the site.
These are only some of the things I do to protect my blogs. Thing is they don't require much time to perform. These are also easy solutions, which can be carried out easily.