fix wordpress malware virus will also inform you that there is no htaccess inside the directory. You can put a.htaccess record in to this directory if you would like, and you can use it to handle this wp-admin directory from Ip Address address or address range. Details of how you can do this are plentiful around the net.
Should your website's server go down, everything you've worked for will go with it. You'll make no sales, get signups or no visitors to your website, until you get the website back up 32, and in short, you are out of business.
Exploit Scanner goes through the files on your site comment database and post tables. You are also notified by it for plugin names that are unusual. It does not remove anything, it simply warns you.
You may extend the plugin features with premium plugins such as: Amazon S3 plugin, Members only plugin, DropShop etc.. I think this plugin is a fantastic option and you can use it for free.
However, I advise that you set up the Login LockDown plugin instead of any.htaccess controls. From being permitted after three unsuccessful login attempts you could check here from a specific IP address for one hour login requests will stop. You can get into your panel while and yet you have protection against hackers, if you do that.