BACKUP & DOWNLOAD your site and database! Use either your cPanel features or use Akeebabackup or whatever you use: Now we get often the question "what extension does protect my site" Answer is simple: NONE : You will need to make sure that your host has its security features optimized (mainly Mod_Security/IPTables Protection/Live upload scanning/suPHP or Mod_Ruid and many more).
Make sure that YOU (!) do not make the basic mistakes: Folder permissions wrong! Never, ever(!) set folders to anything else than 755 and do not set your files other than 644 (global config of Joomla will be set auto to '444) Once again...Some extensions might help you discover vulnerabilities on your server but two key elements make the day or break the day: You & your PC and Your hosting Company!
You use to visit warez/filesharing/porn-sites? Use an other computer than to access your site and make sure you have top-notch protection! Do not underestimate the fact that behind a simple image of the "sun" a whole piece of code can be hissed! Download any zip etc and scan before opening the file!.
Get your Joomla Security Audit