Installing the fix wordpress malware cleanup Scan plugin alert you that you may have missed, and will check most of this for you. Additionally, it will inform you that a user named"admin" exists. Of course, that is the administrative user name. You find directions if you desire and can follow a link. Personally, I believe that there is a strong password good protection, and there have been no attacks on the sites that I run since I followed these steps.
I might find it a little more difficult to crack your password if you're among the proactive ones. But if you're among the ones that are responsive, I might get you.
It's a WordPress plugin. They're drop dead easy to install, have all the features you need for a job like this, and are relatively cheap, especially when compared to having to hire someone to get this done for you.
Now we are getting into matters. You have to rename it to config.php and modify the document config-sample.php, when you install WordPress. You will need to set up the Your Domain Name database facts there.
Change admin username and your WordPress password, or your password and collect and utilize other WordPress safety tips to keep hackers out!