By default, the latest version of WordPress is pretty darn secure. Anything that might have been added to any fix wordpress malware scanner plugins has been considered by the development team of WordPress . Before, WordPress did have holes but now most of them are stuffed up.
I protect an access to important files on the blog's server by placing an index.html file in the particular directory, which hides the files out of public view.
Exclude pages - This plugin adds a checkbox,"include this page in menus", which is checked by default. If you uncheck it, the page will not appear in any listings of webpages (which contains, and is usually restricted to, your page navigation menus).
Note that this step for new installations should try. You need to change all of the table names inside the database if you would like use this link to do it for existing installations.
Do your homework and some searching, but if look what i found you're pressed for time and want to get this try out the WordPress security plugin that I use. It is a relief to know that my site (and company!) are secure.