WordPress Hacked / new site question

A new client of mine had their old (3.9.5) website hacked and is now wanting to move their website to our server, we are requiring them to update to 4.2.2 & secure it.

without pumping a tonn of time into it, this makes sense to me, but I don’t know so I figured I would ask.

100% fresh install -> 100% fresh install of all plugins & themes that are used (so far this is making sense)

now they have a rather large-ish database, is there a way to ‘scan’ a database for any possible bad/malicious entries BEFORE we import the database?