I was hit with a hack on June 19, after a big hassle I think I have deleted all the bad code.
I have installed the Wordfence plugin to protect from similar attacks in the future, however it's the free version. It's apparently 30 days behind in the virus definitions, but at least it's better than nothing. Also I have activated its "extended" protection which goes into action before WP starts.
Is this a good plugin to ward off hackers, or is there another (free) one I should consider? I picked Wordfence because it seemed to have the most users, over 1 million so I thought it must be pretty good.