Since scare tactics seem to be what compels some people to take fix wordpress malware fix a little more seriously, or at least start considering the issue, let me shoot a scare tactics your way.
There are ways to pull this off, and many of them involve re-establishing databases and more and FTPing files, exporting and copying. Some of them are very complex, so it is imperative that you go for the one that is right. Then you may want to look into using a plugin for WordPress backups, if you're not of the technical persuasion.
Exclude pages - This plugin provides a checkbox,"include this page in menus", which can be checked by default. If you uncheck it, the page won't appear in any listings of pages (which contains, and is usually restricted to, your page navigation menus).
You can extend the plugin features with premium plugins like: Amazon see this here S3 plugin, Members only plugin, click over here DropShop etc.. So I think this plugin is a good choice and you can use it.
These are only some of the things I do to secure my blogs. Great thing is that they don't need much time to perform. These are easy options, which this contact form can be carried out easily.