Pro Upgrade: Malware Scan Remediation Tools

What the paid utilities add to scan results

Malcure Malware Shield scans WordPress files, real-time file uploads, databases and user accounts. Results identify file paths or database entries and can include backdoors, shells, obfuscated code, database injections, hidden administrator accounts and malware concealed in picture files.

The base plugin includes detection, scheduled scans and email alerts, real-time threat intelligence, a weekly security pulse email, a firewall and hardening. Free registration and a Malcure Cloud connection are required for the add-on to function. Pro Upgrade and Malcure Advanced Edition add tools for reviewing and acting on findings.

Choose how to handle a finding

Run an initial scan, review the reported paths and line numbers, then configure scheduled scans and alerts. Review suspicious code carefully before choosing a remediation action.

• Repair files: restore infected files from the official source through Malcure Cloud.
• Delete files: remove infected or irreparable files directly.
• Whitelist entries: suppress alarms for selected files and database records.

Scan controls and administration

• Filters and signatures: include or exclude directories and apply custom regular-expression signatures to file and database scans.
• WP-CLI: control scans and security tasks from the command line. Available tasks include asynchronous scans, definition synchronization, checksum refresh and reporting.
• Definition updates: an hourly cron process checks for updates without manual intervention.
• File Inspector: review files inline instead of switching to FTP, SSH or a file manager.
• Client reporting: copy scan results to the clipboard.
• Diagnostics: view the full PHP configuration.
• Factory reset: reset the plugin with one click.
• Premium support: get direct access to security analysts.

WP-CLI can be useful when a compromised site is blocked by its host or an administrator cannot log in to WordPress. Filters can narrow scans to relevant directories or file and database patterns. The plugin runs scans when triggered or scheduled, rather than continuously running heavy background processes.