fix wordpress malware attack will tell you that there is no htaccess from the directory. You may put a.htaccess file into this directory if you desire, and you can use it to control access by IP address to the wp-admin directory or address range. Details of how to do this are available on the internet.
Backup plug-ins is also important. You need to backup database and all the files you can bring your site back like nothing.
Exclude pages - This plugin adds a checkbox,"include this page in menus", which can be checked by default. If you uncheck it, the page will not appear in any listings of pages (which contains, and is usually limited to, your webpage navigation menus).
Along my sources with adding a secret key these details to your wp-config.php file, also think about changing your user password into something that's strong and unique. WordPress will let you know the strength of your password, but include numbers, use letters, and visit a good tip is to avoid phrases. It's also a good idea to change your password frequently - say once.
Of course it's possible to install more plugins to make your store like automatic plugin or share buttons. That's all. Your shop is up and running!