Allow me to shoot a scare tactics your way since scare tactics seem to be what drives some people to take fix wordpress malware attack a little more seriously, or at least start thinking about the problem.
Is also important. You need to backup all the files and database you can easily bring your blog back like nothing.
You first must create a user with administrator rights before you can delete the default admin account. To do this go to your WordPress Dashboard and click on User -> Create New User. Enter all the information you will need to enter.
Upgrade today if you aren't currently running the latest version of WordPress. Similar to keeping your door unlocked when you leave for vacation leaving your site on an old version is.
Implementing all the above will probably take less than an hour to complete, while creating your WordPress website much more resistant to intrusions. Over 1 million WordPress sites were this past year, mainly due to preventable safety gaps. Have yourself prepared and you're likely to Homepage be on the safe side.