The fix wordpress malware protection Codex has an outline of what permissions are acceptable. Directory and file permissions can be changed either via an FTP client or within the administrative page from your hosting company.
There are numerous ways to pull off this, and many involve re-establishing databases and more and FTPing files, exporting and copying. Some of these are very complex, so it's imperative that you go for the one that is right. Then you might want to look into using a plugin for WordPress backups, if you're not of the persuasion.
It's a WordPress plugin. They are drop dead simple to install, have all the features you need for a task like this, and are relatively cheap, especially when compared to having to employ Clicking Here someone to get this done for you.
You can get an SSL Encyption Security to your WordPress blogs. The SSL Security makes encrypted and secure communications with your blog. You can even keep history of communication and the all of the cookies so that all transactions are recorded. Be certain all your sites get SSL security for utmost protection from hackers.
Free software: If you've installed free scripts search description Google for'wordpress security'. You'll get tips.