Pro Upgrade: Malware Scan Remediation Tools

From scan results to remediation

Malcure Malware Shield scans WordPress files and uploads, databases, and user accounts for malware. Findings identify file paths or database entries and can include backdoors, shells, obfuscated code, database injections, hidden administrator accounts, and malware concealed in image files. The base add-on delivers detection, scheduled scans and email alerts, real-time threat intelligence, a weekly security pulse email, a firewall, and hardening. Free registration and a Malcure Cloud connection are required for the add-on to function.

Pro Upgrade and Malcure Advanced Edition add utilities for administrators who need to investigate findings and take security actions. Review suspicious code before deciding whether to repair or remove it.

Tools for reviewing and changing findings

• Repair or delete files: Repair infected files from the official source through Malcure Cloud, or remove infected and irreparable files directly.
• Whitelist files and database records: Suppress alarms for selected items.
• Filter scans: Include or exclude directories and use custom regular-expression signatures for files and databases.
• Inspect files inline: Review suspicious or infected files without switching to FTP, SSH, or a file manager.
• Prepare client reports: Copy scan results to the clipboard.

Command-line and maintenance controls

WP-CLI provides access to scans and security tasks, including asynchronous scans, definition synchronization, checksum refresh, and reporting. These controls can be useful when the website is blocked by its host or the administrator cannot log in to WordPress. An hourly cron process checks for definition updates.

Diagnostics show the full PHP configuration. The plugin can also be reset with one click, and premium support provides direct access to security analysts.

Starting a scan workflow

Install and activate Malcure Malware Shield, then open its menu and follow the wizard to start an initial scan. Review the reported paths, line numbers, or database records, then configure scheduled scans and alerts. When the paid tools are available, use them to repair or delete files, whitelist selected records, narrow scans with filters, or manage security tasks through WP-CLI. If a finding is suspicious rather than clearly malicious, inspect it before choosing a remediation action.