Cloning your site is just another degree in how to fix hacked wordpress site that may be very useful. Cloning simply means that you have backed up your website to a completely different place, (offline, as in a folder, so as to not have SEO issues ) where you can get it in a moment's notice if the need arises.
Safeguard your login credentials - Don't keep your login credentials where a hacker could find them. Store them off, as well as offline. Roboform is for protecting them good . Food for thought!
Harness Scanner goes in Discover More search of anything suspicious through the files on your site place, comment and database tables. It informs you for plugin names that are unusual. It does not remove anything, it warns you.
Install the WordPress Firewall Plugin. Stop and this plugin investigates web requests with WordPress-specific heuristics that are easy to recognize attacks.
I prefer using a WordPress plugin to get the job done. Make sure is able to do copies that are select, has restore performance, and can replicate. Also be sure that it is frequently updated to keep pace with all new versions of WordPress. There's absolutely not any use in not working, and backing up your data to a plugin that is out of date.