Finally, fix malware problems free will tell you that there's not any htaccess from the directory. You can put a.htaccess file if you wish, and you can use it to control access to the directory from IP address or address range. Details of how to do that are available on the internet.
Do not depend on your internet host - Many men and women depend on their web host to"do all that technical stuff for me", not realizing that sometimes, they don't! Far better to have the responsibility lie rather than out.
It's a WordPress plugin. They are drop dead simple to install, have all the features you need for a task like this, and are relatively cheap, especially when compared to having to employ someone to have this done for you.
Make a note of your new password! I suggest the paid or free version of the software that is protected *Roboform* to remember your passwords.
Do your homework and some hunting, but if you're pressed for time and want to get this try the WordPress security plugin that I use. It is a relief anchor to know that my site (and business!) are secure.