Finally, fix wordpress malware plugin will tell you that there's no htaccess in the directory. You may put a.htaccess file into this directory if you wish, and you can use it to control access to the wp-admin directory or address range. Details of how to do this are available on the net.
Well, we are actually talking about WordPress but what's the feeling if your computer is in danger of hackers of performing security checks and upgrades. There are files which can encrypt key loggers on your computer. When this occurs, regardless of what you do, they can access everything that you type on your computer. You can find a lot of antivirus programs online. Just search for a credible antivirus program or ask experts about this.
Maintain control of your online assets - Nothing is worse than having your livelihood in the hands of someone else. Why take chances with something as important as your website?
Whitelists phrases and black based on which field they appear within. (unknown/numeric parameters vs. known article bodies, remark bodies, etc.).
However, I advise that you install the Login LockDown plugin in place of any.htaccess controls. From being allowed after three unsuccessful login attempts from a certain IP address for an hour login requests will stop. If you do that, you may still access your panel while away from your workplace, and yet you have great protection against useful reference hackers.