fix malware problems free will even tell you that there's not any htaccess in the wp-admin/ directory. You may put a.htaccess file if you desire, and you can use it to control access to the directory by IP address or address range. Details of how to do that are easily available on the internet.
Also, don't make the mistake of believing that your hosting company will have your back so far as WordPress backups go. Not always. It's been my experience that the company may or may not be doing proper backups while they say that they do. Take that kind of chance?
What is the best solution you should pick? Out of all of the possible options you can make, which one should you choose and which one is right for you now?
Now we're getting into matters. Whenever you install WordPress, you need to edit the document config-sample.php and rename it to config.php. go now You need to set up the database information there.
I prefer to use a WordPress plugin to get the work done. Just make sure is able to do select copies, has restore performance, and can clone. Be sure it is frequently updated to keep pace with all new versions of WordPress. There's absolutely not any use in backing up your data and not functioning.