Keep headers/logos under 125 pixels high. It takes up valuable viewing space, especially for laptop users, that is best left for the good stuff to appear"above the fold" Take a cue from the big companies, simple logos done well say it all. This is our #1 pet peeve - screaming logos and headers!
It helped me although my first step isn't one you must take. I had a good old style pity party. I cried and railed against the evil hackers (that where probably 13 and smarter then me.) And I did before I started my website, what I should have done. And here is where I would like you to start. Learn hacked. The attractive thing about fix hacked wordpress database and why so many of us recommend because it is really easy to learn it is. That is also a detriment to the health of our sites. We need to learn how to put in a security fence.
An easy way is to use a few tools that are built-in. To begin with, don't This Site allow people run a web host security scan, to list the documents in your folders and automatically backup your whole web hosting account.
One thing you can take is to delete the default administrator account. This is critical because if you do not do it, malicious user already know a user name which they could try to crack.
Note that this last step for setups should try. If you would like to do it you have to change all the table names inside the database.
Do your homework and some searching, but if you are pressed for time and need to get this try out the WordPress security plugin that I use. It is a relief to know that my site (and company!) are secure.