fix wordpress malware cleanup will tell you that there is not any htaccess from the directory. You may put a.htaccess file into this directory if you wish, and you can use it to control access to the wp-admin directory or address range. Details of how to do this are available on the internet.
I protect an access to important files on the site's server by placing an index.html file in the particular directory, that hides the files out of public view.
It's a WordPress plugin. They are drop dead easy to set up, have all the functions you need for a job More Info such as this, and are relatively inexpensive, especially when compared to having to hire someone to have this done for you.
BACK UP your website regularly and keep a copy on your own computer and storage. Back For those who have a site. You spend a lot of time and money on your site, don't skip this! Is BackupBuddy, no additional plug-ins back up database, widgets, plugins and your files. Need to move your website to another host, this will do it in less than a few minutes!
Do your homework and some hunting, but if you are pressed for time and need to get this try the WordPress click resources safety plugin that I use. It is a relief to know that my website (and business!) are secure.