fix wordpress malware virus will also tell you that there is not any htaccess from the wp-admin/ directory. You can put a.htaccess file into this directory if you wish, and you can use it to control access by IP address to the wp-admin directory or address range. Details of how to do that are important site available on the net.
Truth is, there is no way, if your own site is targeted by a master of this script. Everything you are about to read below are a few precautionary measures you can take to quickly minimize the risk. Odds are a hacker would prefer choosing simpler victim, another if your WordPress site is protected.
Yes, you need to do regular backups of you can try here your website. I recommend at least a weekly database backup and a monthly "full" backup. More, if at all possible. Definitely, if you make changes and additions to your site. If you make changes multiple times a day, or have a community of people which are in there all the time, a daily backup should be a minimum.
Upgrade if you're not currently running the latest version of WordPress. Similar to maintaining your door unlocked when you leave for vacation, leaving your website on an old version is.
I prefer using a WordPress plugin to get the work done. Just make sure is in a position to do copies that are select, has image source restore and can clone. Also be sure that it is frequently updated to keep pace with all versions of WordPress. There is no use in backing up your data to a plugin that is out of date, and not functioning.