fix malware problems free will inform you that there is not any htaccess inside the directory. You may put a.htaccess record in to this directory if you would like, and you can use it to manage usage of this wp-admin directory by Ip Address address or address range. Details of how you can do that are plentiful around the internet.
Hackers don't have the capability once you got all these lined up for your security, to come to a WordPress blog. You can have a WordPress account which provides you big bucks from affiliate marketing.
Should you ever wish to migrate your site elsewhere, like a new web host, you'd be able to pull this off without a hitch, and also without having to disturb your old site until the new one was set up and ready to roll.
Can you view that folder what if you go to WP-Content/plugins? If so, upload this blank Index.html file inside that folder this link as well so people can not see what plugins you might have. Because if your existing version of WordPress is current, if you're using a plugin or an old plugin with a security hole, someone can use that to get access.
Oh . And by the way, I was talking about plugins. Make sure it's a safe one when you get a plugin. Don't install any plugin because the owner is saying on his site that plugin will allow you to do that or this. Maybe use a test blog to check the plugin, or maybe get a software engineer to analyze it carefully. This way you'll know it isn't a threat for your business or you.