I was helped by it although my first step is. I had a fantastic old fashion pity party. I cried and railed against the evil hackers (that where probably 13 and smarter then me) And I did before I started my site, what I should have done. And here is where I want you to start. Learn hacked. The thing about fix wordpress malware and why so many people recommend because it is really easy to learn, it is. That is also a detriment to the health of our websites. We have to learn how to put in a security look these up fence around our site.
Also, don't make the mistake of thinking that your hosting company will have your back so far as WordPress copies go. Not always. While they say that they do, it has been my experience that the hosting company may or may not be doing proper backups. Why take that kind of chance?
For me it's a WordPress plugin. They're drop dead simple to set up, have all the functions you need for a job like this, and are relatively inexpensive, especially when compared to having to hire someone to have this done for you.
Pathological-looking phrases that were whitelists and black based on which area they appear within, in a page request. (unknown/numeric parameters vs. known article bodies, comment bodies, etc.).
Just make sure which you can schedule, and you decide on a plugin that is up to date with the version and release of WordPress, restore and clone.