At the risk of bumping, here's more info about .htaccess files. I think there are five of them within the Wordpress installation folder (which back then I named "journal")
/journal
/journal/wp-content/plugins/akismet
/journal/wp-content/plugins/wordfence/lib
/journal/wp-content/plugins/wordfence/tmp
/journal/wp-content/wflogs
I don't know much about these files. Can I safely delete them? Do you want the contents of them here to see if there is a problem? I don't know what to do, if anything.
Should I also be checking outside of the Wordpress installation?