My first step isn't one you must take but it helped me. I had a fantastic old style pity party. I cried and railed against the evil hackers (that where probably 13 and smarter then me) And I did what I should have done before I even started my website. And here is where I would like you to start. Learn how to protect yourself before you get hacked. The beautiful thing about fix wordpress malware removal and why so many of us recommend because it is really easy to learn it is. Unfortunately, that can also be a detriment to the health of our websites. We need to learn how to add a security fence around our website.
Everything you've worked for will proceed with this should the server of your site go down. You'll have a peek at this website make no sales, get no traffic or signups to your site, and in short, you are out of business until you get the website.
Yes, you need to do regular backups of your site. I recommend at least a weekly database backup and a monthly "full" backup. More, if at all possible. If you make changes and regular additions to your website, definitely more. If you make changes multiple times a day, or have a community of people which are in there all the time, a daily backup should be a minimum.
Can you see that folder, what if you go to WP-Content/plugins? If so, moved here upload this blank Index.html file inside that folder as well so people can't view what plugins you have. Because if your existing version of WordPress is current, if you are using an old my review here plugin or a plugin with a security hole, someone can use this to get access.
Of course it's possible to set up plugins to make your shop more user friendly like share buttons or backup plugin. That's all. Your store is now up and running!