I FORGOT TO ADD TO VIDEO:
1) Change Admin username from "admin" to anything like "freddie", "nancy", "mommy", etc. You may have to go into your database to do this.
2) Remove the default "Site" Templates: Atomic, Beez2, beez3, Beez5, protostar
I'll show you the Hackers who got into my Joomla site.
How the Hackers got in.
How to find the files the Hackers used to hack your Joomla or WordPress site.
fixing a hacked Joomla web site.