Cloning your site is another level in fix malware problem which can be useful. Cloning simply means that you have backed up your site to a totally different place, (offline, as in a folder, so as not to have SEO issues ) where you can access it in a moment's notice if necessary.
Is also important. You want to backup database and all the files you can bring back your site check this like nothing.
There's a section of config-sample.php that's headed"Authentication Unique Keys." There are. A hyperlink is within that part of code. You need to enter that link into your browser, copy the contents which you return, and then replace the keys you have with the unique, pseudo-random keys provided by the website. This makes it harder for attackers to automatically create a"logged-in" cookie for your website.
Upgrade now, if you're not currently running the latest version of WordPress. Similar to keeping your door unlocked when you leave for vacation, leaving your Going Here website on an old version is.
Don't use wp_ as a prefix for your databases. Web hosting providers are currently eliminating that default but if yours doesn't, fix wp_ to anything but that.