fix wordpress malware will inform you that there's not any htaccess inside the directory. You may place a.htaccess record into this directory if you would like, and you can use it to manage usage of this wp-admin directory by Ip Address address or address range. Details of how you can do that are plentiful around the internet.
There are numerous ways to pull off this, and many of them involve copying and FTPing files, exporting and re-establishing much more and databases. Some of these are very complex, so it is important that you select the one that is best. Then you may want to look into using a plugin for WordPress backups, if you are not of the persuasion.
For me it's a WordPress plugin. They are drop dead simple to set up, have all the features you need for a task such as this, and are relatively cheap, especially when compared to having to employ someone to have this done for you.
Install the WordPress Firewall Plugin. This plugin investigates web requests with heuristics to identify and stop attacks.
Of course you can set up plugins to make your shop like automatic backup plugin or next page share buttons. That's all. Your shop is now up and running!