Allow me to shoot a couple of scare tactics your way since scare tactics seem to be what drives some people to take fix wordpress malware a little more seriously, or at the very least start considering the issue.
Basically, it all will start with the fundamentals. Attempt to use complex passwords. Use spaces, numbers, special characters, and letters and combine get redirected here them to create a password. You could use usernames that are not have a peek at this website obvious.
Yes, you need to do regular backups of your website. I recommend at least a weekly database backup and a monthly "full" backup. More. If you make regular additions and changes to your site, definitely. If you make changes multiple times a day, or have a community of people which are in there all the time, a daily backup should be a minimum.
Can you see that folder, what if you visit WP-Content/plugins? If so, upload this blank Index.html file into that folder as well so people can't see what plugins you might have. Someone can use that to get access because even if your current version of WordPress is up to date, if you are using a plugin or an old plugin with a security hole.
Implementing all of the above will take less than an hour to complete, while creating your WordPress website more resistant to intrusions. Websites were cracked this past year, mainly due to preventable security gaps. Have yourself prepared and you're likely to be on the safe side.