fix malware problem will even tell you that there's no htaccess from the directory. You can put a.htaccess file if you desire, and you can use it to control access from IP address to the wp-admin directory or address range. Details of how to do that are available on the internet.
Hackers don't have the capability to come to a WordPress blog when you got all these lined up for your own security. You can have a safe WordPress account which provides big bucks from affiliate marketing to read review you.
For me it's a WordPress plugin. They're drop dead easy to set up, have all the functions you need for a task like this, and are relatively cheap, especially when compared to having to employ someone to get this done for you.
Now we are getting into things specific to WordPress. You must rename it to config.php and alter the file config-sample.php, when you install WordPress. You need to deploy the database facts there.
The my company plugin should be updated play nice, to remain current with the latest WordPress release and have WordPress and restore capabilities. The ability to clone your website (along with regular backups) can be useful if you ever need to do an offline website redesign, among other things.