Did most of that.I even did a clean install of WP,on a new FTP acccount and NO plugins.3 days later,got hacked again.
Checked my DB to see other hidden users.Nothing.My password are changed and way too complex to be guessed.
I need to find how the intrusion happens.