It's also important to change your password and admin username if you are helped by someone and needs admin username and your password to login to do the work. After all the work is complete, IMMEDIATELY change your password and admin username. Someone in their company might not be if the person is trustworthy. Better to be safe than sorry!
The fix wordpress malware cleanup Codex has an outline of what permissions are okay. Directory and file permissions can be changed either via an FTP client or within the administrative page from your hosting company.
There are ways to pull this off, and many involve re-establishing databases and much more and FTPing files, exporting and copying. Some of these are very complicated, so it's imperative that you select the best one. Then you may want to check into using a plugin for WordPress backups if you're not of the persuasion that is technical.
Keep your WordPress Setup to date - One of the easiest and most valuable tasks you can do yourself is to ensure that your WordPress installation is updated. WordPress gives a notice on your dashboard to you, so there is really no reason to not do this.
Black and pathological-looking phrases that were whitelists based on which field they appear inside, in a page request. (unknown/numeric parameters vs. known article bodies, remark bodies, etc.).
Oh . And by the way, I was talking about plugins. Make sure it's a secure one when you get a new plugin. Don't install any plugin just because the owner is saying on his website that plugin can help you do this or that. Use maybe, or a test site to check the plugin get a software engineer see this site to examine it carefully. This way isn't a threat for your business or you.