I was helped by it although my first step isn't one you have to take. I had a good old fashion pity party. I cried and railed against the evil hackers (that where probably 13 and smarter then me.) And I did what I should have done before I started my website. And here is where I want you to start. Learn hacked. The attractive thing about how to fix hacked wordpress site and why so many of us recommend it is because it is easy to learn. Unfortunately, that is also a detriment to the health of our websites. We have Source to learn how to add a safety fence around our site.
Safeguard your login credentials - Don't keep your login credentials where they might be found by a hacker. Store them off, as well as offline. Roboform is for protecting them good , too. Food for thought!
Exploit Scanner goes through the files on your website place, comment and database tables in search of anything suspicious. You are also notified by it for plugin names that are my response unusual. It doesn't remove anything, it simply warns you.
Can you view that folder, what if you go to WP-Content/plugins? If so, upload this blank Index.html file into that folder as well so people can not view what plugins you might have. Someone can use this to get access because even if your existing version of WordPress is up to date, if you're using a plugin or an old plugin with a security hole.
Do your homework and some searching, but if you're pressed for time and need to get browse around this site this try out the WordPress safety plugin that I use. It is a relief to know that my website (and company!) are secure.