Allow me to shoot a scare tactics your way since scare tactics seem to be what compels some people to take fix wordpress malware attack a bit more seriously, or at the very least start thinking about the issue.
There are numerous ways to pull this off, and a lot of them involve re-establishing databases and much more and FTPing files, exporting and copying. Some of them are very complicated, so it's imperative that you select the right one. Then you may want to check into using a plugin for WordPress backups, if you're not of the technical persuasion.
Fortunately, keeping your WordPress website more helpful hints up-to-date is one of the most easy things you can do. For the past couple of versions, WordPress has included the ability to set up automatic updates. Not only that, but sites are notified whenever a new upgrade becomes available.
Along with adding a secret key to your wp-config.php document, also think about changing your user password to something that is strong and unique. A great idea is to avoid common phrases, use upper and lowercase letters, and include numbers, although you will be told the strength of your password by wordPress. It's also a good idea to change your password regularly - say once every six months.
You don't always think about needing security when your website is new but you do have to protect your investment and yourself. Having a site go down and not being able to restore it may mean a loss of consumers who can not find you and probably won't remember to look for your site later. Do not let that happen to you. Back up your site as soon as you get it started, and schedule backups for as long as the site is operational. That way, you will have WordPress security and peace of mind.