Cloning your site is another degree in fix malware problem that may be useful. Cloning simply means that you've backed up your site to a totally different location, (offline, as in a folder, so as not to have SEO issues ) where you can get it at a moment's notice if the need arises.
An easy way is to use a few tools that are built-in. To begin with, don't allow people run a web host security scan to list the files in your folders and automatically backup your whole web hosting account.
Exploit Scanner goes through the files on your site post, comment and database tables. It also informs you for plugin names that are odd. It doesn't remove anything, it simply warns you for threats.
Safety plug-ins that were all-Rounder can be considered as a security checker that was full. They provide you with information concerning the weaknesses of the site and scan and check the website.
Do your homework and some searching, but if you are pressed for time informative post and need to get this try the WordPress safety plugin that I use. It is a relief to know that my site more (and business!) are secure.