By default, the latest version of WordPress is pretty secure. Anything which may have been added to any fix wordpress malware cleanup plugins has been considered by the development team of WordPress . Before, WordPress did have holes but most of them are stuffed up.
Well, we are actually talking about WordPress but what's the sense of doing updates and security checks if your computer is in danger of hackers. There are malicious files that can encrypt key loggers. Regardless of what you do, they can easily access everything that you type on your computer when this happens. You can find a lot of antivirus programs that are good on the Internet. Just search for a antivirus program or ask experts about this.
It's a WordPress plugin. They are drop dead simple to install, have all the functions you need for a task like this, and are relatively cheap, especially when compared to having to employ someone to get this done for you.
Can you view that folder what if you go to WP-Content/plugins? If so, upload that blank Index.html file into that folder as well so people can't view what plugins you try this website might have. Because even if your current version of WordPress is up to date, if you're using a plugin or an old plugin using a security hole, then someone can use this to get access.
When your site is new, you do think about needing security but you do need to protect your investment and yourself. Having a site go down and not being able to restore it quickly may mean a major loss of customers who can't find you and probably won't remember to search for your website again later. Don't let this happen to you. Back your site up as soon as you get it started, as the site is operational, and visit our website schedule backups for as long. This way, you will have WordPress security and peace of mind.