fix malware problem will also tell you that there's no htaccess in the wp-admin/ directory. You may put a.htaccess file into this directory if you wish, and you can use it to control access by IP address to the directory or address range. Details of how to do this are readily available on the net.
Well, we're talking about WordPress but what is the feeling if your own computer is at risk of hackers of doing upgrades and security checks. There are files which why not try here can encrypt key loggers on your computer. No matter what you do, they can access everything that you type on your keyboard when this occurs. You can why not check here find a lot of antivirus programs that are good . Just look for a credible antivirus program or ask experts about this.
Keep control of your assets that are online - Nothing is worse than getting your livelihood in someone else's hands. Why take chances with something as important as your site?
You may extend the plugin features with premium plugins such as: Amazon S3 plugin, Members only plugin, DropShop etc.. So I think you can use it and this plugin is a good option.
There is another problem you have with WordPress. People always know where they can login and additionally they could drop by your login form and try a different combination of user accounts and passwords out. So as to prevent this from happening you need to install Login Lockdown. It is a plugin that only lets users try and login with a wrong Recommended Site password three times. Following that the IP address will be banned from the server for a specific timeframe.