I have had two WordPress blogs hacked into in the past. That was at a time when I was doing very little internet marketing, and until I found time to address the situation (months later), these sites were penalised in the search engines. They were not removed, but the rankings were reduced.
My first step isn't one you must take but I was helped by it. I had a good old style pity party. I cried and railed against the evil hackers (that where probably 13 and smarter then me.) And I did what I should have done before I even started my website. And here is where I want you to start as well. Learn how to protect yourself until you get hacked. The thing about fix malware problems free and why so many of us recommend it is because it is easy to learn. Unfortunately, that is also a detriment to the health of our sites. We have to additional reading learn how to add a security fence.
This is great news because it means that there's a community of users and developers that can improve the platform. However there's a significant group there will always be people who will try to take them down.
Keep control of your assets - Nothing is worse than having your livelihood in somebody else's hands. Why take chances with something as important as your site?
Now visit here it's time use this person's name and identity to present as your buddy and to sign up for a Facebook account. After I get it all set up, I'll be emailing you posing as your friend and asking you to be friends with me on Facebook (or Twitter, or whichever societal site).
However, I recommend that you set up the Login LockDown plugin in place of any.htaccess controls. Login requests will stop from being allowed after three unsuccessful login attempts from a specific IP address for an hour. You can access your admin panel whilst away from your workplace, and yet you check here still have protection against hackers if you do that.