Since scare tactics appear to be at least start considering the issue, or what compels some people to take fix wordpress malware fix a little more seriously, allow me to shoot a few scare tactics your way.
I protect an access to important files on the site's server by placing an index.html file in the particular directory, which hides the files from public view.
Before you can delete the default admin account, you first need to create a user. To do this go to your WordPress Dashboard and click on User -> Create New User. Then enter all of the information you will need to enter.
BACK UP your site and keep a copy on your computer Full Report and off-site storage. If you have a very active website, back. You spend a lot of time and money on your website, don't skip this! Is BackupBuddy, no back up plugins, widgets, your documents and go now database. Need to move your site this will do it in under a couple of minutes!
Just make sure you choose a plugin that's up to date with release and the current version of WordPress, and that you can Get More Information schedule, restore and clone.