Cloning your website is just another degree in fix wordpress malware virus which can be useful. Cloning simply means that you have backed up your website to a totally different place, (offline, as in a folder, so as to not have SEO issues ) where you can get it in a moment's notice if the need arises.
There are many ways to pull off this, and many of them involve re-establishing more and databases and FTPing files, exporting and copying. Some of them are very complicated, so it's important that you select the one that is best. Then you might want to look into using a plugin for WordPress backups, if you are not of the persuasion.
Is to delete the default administrator account. This is Get the facts critical because if you do not do it, malicious user know a user name that they could try to crack.
Whitelists phrases and black based on which area they look inside. (unknown/numeric parameters vs. known article bodies, comment bodies, etc.).
Always keep in mind the security of your sites depend on how you manage them. Be certain that you follow these simple tips to avoid hacks and exploits on your blogs and sites.