AJAX loading from wp-admin

Hello,
atm sites using BeTheme are loading this script:

//<![CDATA[
window.mfn_ajax = "http://site/wp-admin/admin-ajax.php";
window.mfn_nicescroll = 40;
window.mfn_prettyphoto = {disable:0, width:0, height:0, title:0};
window.mfn_sliders = {blog:0, clients:0, offer:0, portfolio:0, shop:0, slider:0, testimonials:0};
//]]>

Which points to /wp-admin/ folder. This is problematic as it's the only instance of anything being loaded from the admin folder during normal site browsing which prohibits the use of .htaccess to protect /wp-admin/ folder.
I'm not sure it is related to BeTheme or rather Visual Composer. Can Muffin devs clarify if it's BeTheme logic or something from Visual Composer?