Recovering a WordPress site thats been compromised is not fun, where to find all those images etc. etc. The solution, run a daily BackUp of the whole wp-content folder, then you have everything to restore your site ::: However if you backup your site every day this can drain your server resources if you have thousands of images ( remember each image in WP is duplicated AT LEAST 3 times ), imagine your BU running while you have a reasonable traffic :::