My first step is but I was helped by it. I had a good old fashion pity party. I cried and railed against the evil hackers (that where probably 13 and smarter then me.) And then I did what I should have done before I started my website. And here is where I would like you to start. Learn how to protect yourself before you get hacked. The thing about fix wordpress malware scanner and why so many people recommend it is because it is easy to learn. That can also be a detriment to the health of our websites. We need to learn how to put in a safety fence around our website.
A simple way would be to use a few tools. First go to website of all, do not allow people to list the files in your folders, run a web host security scan and automatically backup your web hosting account.
It's a WordPress plugin. They're drop dead easy to install, have all the features you need for a job such as this, and are relatively cheap, especially when compared to having to employ someone to have this done for you.
Another step to take directory to make WordPress more secure is to upgrade WordPress to the latest version. The main reason behind this is that there also come fixes for older security holes making it essential to update.
I prefer using a WordPress plugin to get the work done. Just make sure the plugin you select is able to do backups that are select, has restore functionality, and can clone. Also be sure it is frequently updated to keep pace with all versions of WordPress. There is no use in not working, and backing your data up to a plugin that's out of why not look here date.