Finally, fix hacked wordpress site will tell you that there's not any htaccess from the directory. You can put a.htaccess file if you wish, and you can use it to control access to the wp-admin directory or address range. Details of how to do that are available on the internet.
Hackers do not have the power to come to your WordPress blog when you got these lined up for your security. You can have a safe WordPress account which gives you big bucks from affiliate marketing.
For me it's a WordPress plugin. They're drop dead easy to install, have all the features you need for a job such as this, and are relatively YOURURL.com cheap, especially when compared to having to hire someone to get this done for you.
It's time use this person's name and identity to pose as your friend and to register for a Facebook account. Once I get it all set up, I'll be emailing you posing as your friend and asking you to be friends with me on Facebook (or Twitter, or whichever societal site).
Do your homework and some hunting, but if you're pressed for time and need to get this try out the WordPress safety plugin that I use. It is a relief to know that my site (and company!) are secure.