There's a portion of config-sample.php that's headed'Authentication Unique Keys.' You will find. There's a hyperlink fix wordpress malware attack within that section of code.You have to enter that link in your browser, copy the contents which you return, and change the keys you have with the special, pseudo-random keys given by the website. This makes it harder for attackers to quickly create a'logged-in' dessert for your website.
Backup plug-ins is also important. You want click for info to backup all the database and files so More Help in case of a sudden attack, you can bring back your own blog like nothing.
Exploit Scanner goes in search of anything suspicious through the files on your site comment database and post tables. It informs you for plugin names. It does not remove anything, it simply warns you.
Make a note of your new password to the next time you sign in! I suggest the version of the protected software *Roboform* to remember your passwords.
Do your homework and some hunting, but if you're pressed for time and want to get this done once and for all, try the WordPress safety plugin that I use. It click here for more is a relief to know that my website (and company!) are secure.