Since scare tactics appear to be what compels some people to take fix wordpress malware attack a bit more seriously, or at the very least start considering the problem, let me shoot a couple of scare tactics your way.
You can search for software that will backup your database and files. If hackers abruptly hack your website, Look At This you can easily restore your website by means of your files and change everything that must be changed.
So what is the solution you should choose? Out of all the possible choices you can make, which one should you choose and which one is ideal for you specifically now?
As I (our fictitious Joe the Hacker) know, people have far too many usernames and passwords to remember. You've got Twitter, look at here Facebook, your online banking, LinkedIn, two site logins, FTP, web hosting, etc. accounts that all come with logins and passwords you need to remember.
Do not use wp_ as a prefix for your databases. Most web hosting providers are eliminating that default but if yours does not, adjust wp_ to anything but that.