fix malware problems free will even tell you that there's not any htaccess in the directory. You may put a.htaccess file within this directory if you desire, and you can use it to control access from IP address to the wp-admin directory or address range. Details of how to do this are available on the internet.
A simple way is to use a few built-in tools. First of all, do not allow people to list the files run a web host security scan and automatically backup your web hosting account.
Keep control of your assets that are online - Nothing is worse than getting your livelihood in the hands of somebody else. Why take chances with something as important as your site?
If you aren't currently running the latest version of WordPress, upgrade. Similar to keeping your door unlocked when see this page you leave for vacation leaving your site on an old version is.
Of course it's possible to set up plugins to make your store like share buttons or automated plugin. That's all. Your shop is now up and running!