Detection and remediation

Malcure Malware Shield scans WordPress files, real-time file uploads, databases and user accounts for threats such as backdoors, shells, obfuscated code, database injections, hidden administrator accounts and malware concealed in picture files. Scan findings identify file paths or database records.

The base plugin includes detection, scheduled scans and email alerts, real-time threat intelligence, a weekly security pulse email, a firewall and hardening. Free registration and a Malcure Cloud connection are required for the plugin to function. Scans execute when triggered or scheduled rather than through continuous heavy background processes.

Pro Upgrade and Malcure Advanced Edition add tools for administrators who need to investigate and act on findings. Whether the upgrade fits depends on whether the website needs remediation, command-line controls or additional investigation tools.

What the paid editions add

• Repair or delete files: repair infected files with one click from the official source through Malcure Cloud, or delete infected and irreparable files directly.
• Manage whitelists: suppress alarms for selected files and database records.
• Refine scans: include or exclude directories, apply advanced filters and use custom regular-expression signatures for file and database patterns.
• Run WP-CLI tasks: control scans and security tasks from the command line, including asynchronous scans, definition synchronization, checksum refresh and reporting.
• Update definitions: an hourly cron process checks for definition updates, reducing the need for manual checks.
• Inspect and report: review files inline with File Inspector and copy scan results to the clipboard for client reports.
• Diagnose and reset: view the full PHP configuration for diagnostics or reset the plugin with one click.
• Get premium support: access security analysts directly.

How to use the tools

Install and activate Malcure Malware Shield, follow its setup wizard and run an initial scan. Review the reported file paths, line numbers and database records, then configure scheduled scans and alerts. If a finding is suspicious rather than clearly malicious, inspect it carefully before choosing a remediation action. Repair affected files, delete files that cannot be repaired, or whitelist known records that should no longer trigger alarms.

WP-CLI supports command-line work when a compromised site is blocked by its host or the administrator cannot log in to WordPress. Scan filters and custom signatures can narrow an investigation to relevant directories or file and database patterns. The inline inspector and clipboard reporting can also help with troubleshooting and client service work.