I fix hacked websites for living and recommend this to my clients for basic security, http://hackrepair.com/blog/hackrepair-com-security-tips-and-hack-notes
Though caveat is that it can get pretty annoying, and for most of my clients I recommend not using the daily reporting and just periodically run the antivirus report.
This is a great tool for someone who has a little HTML experience, though for folks who have no idea what PHP or HTML coding is this can be quite stressful. Let's just say that having to go login because "Suzy" thinks there's malware on her site because of all the "red" on the Antivirus page can get a bit tedious.
Web designers be warned if you are installing for your clients; well, unless you like talking to your client "a lot."
[sig moderated as per the Forum Rules]