fix wordpress malware plugin will tell you that there's not any htaccess from the wp-admin/ directory. You may put a.htaccess file if you wish, and you can use it to control access to the wp-admin directory or address range. Details of how to do this are easily available on the internet.
Is also important. You want to backup all the files and database you can bring your own blog back like nothing happened.
I don't think there's a person out there that after learning how much of a problem WordPress hacking is that it's a good idea. However is that when it comes to securing their blogs, bloggers seem to be stuck in this state that is reactive.
Upgrade today if you aren't currently running the latest version internet of WordPress. Like maintaining your door unlocked when you leave for vacation, leaving your site in an old version is.
Oh . And incidentally, I talked about plugins. Make sure it's a secure one when you get a new plugin. Don't install any plugin just because the owner is saying on his website that plugin will allow you to do look these up that or this. Use a test site to look at the plugin, or maybe get a software engineer to analyze it carefully. This way isn't a threat for your business or you.