fix malware problem Watch out form submissions. You may useRegexp to process the information . You can also define preloaded variables as form data in the kind of checkboxes, radiobuttons etc..
There are ways to pull this off, and a lot involve copying and FTPing files, exporting and re-establishing much more and databases. Some of them are very complex, so it is important that you select the one that is right. Then you might want to check into using a plugin for WordPress backups, if you're not of the persuasion.
You also need to place the"Anyone Can Register" anonymous in Settings/General to away, and you should have some sort of spam plugin. Akismet is the old standby, the one I use, but there are lots of them these days.
Make a note of your new password! I recommend the version of the secure software *Roboform* to remember your passwords.
Free software: If you have installed free scripts like Wordpress, search Google for'wordpress security'. You will get many tips on how best to create your WP blog secure.