Cloning your site is just another level in fix wordpress malware removal which may be useful. Cloning simply means that you've backed up your website to a totally different place, (offline, as in a folder, in order not to have SEO problems) where you can get it in a moment's notice if the need arises.
Essentially, it original site all will start with the fundamentals. Try to use complex passwords. Use letters, numbers, special characters, and spaces and combine them to create a special password. You could use.
Is to delete the default administrator account. This is critical because if you don't do it, malicious user know a user name which they could try to crack.
Install the WordPress Firewall Plugin. Stop and this click over here now plugin investigates web requests to recognize obvious attacks.
Don't use wp_. Most web hosting providers are eliminating that default now but if yours doesn't, fix wp_ to anything but that.