Malcure Malware Shield scans WordPress files, real-time file uploads, databases, and user accounts for malware. Findings identify a file path or database record and may include backdoors, shells, obfuscated code, database injections, hidden administrator accounts, or malware in image files. The free capabilities include detection, scheduled scans and email alerts, real-time threat intelligence, a weekly security pulse email, a firewall, and hardening. Free registration and a Malcure Cloud connection are required for the plugin to function.

Prepare and run a scan

Install and activate Malcure Malware Shield, then open the Malcure menu and follow its setup wizard. Run an initial scan across the available site surfaces, review the reported paths and line numbers, and configure scheduled scans and alerts. Scans run when started or scheduled rather than through continuous heavy background processes.

Review findings and choose an action

Pro Upgrade and Malcure Advanced Edition add tools for administrators who need to act on scan results. Review suspicious code carefully before deciding on remediation.

• Repair files: Restore infected files from the official source through Malcure Cloud with one click.
• Delete files: Remove infected or irreparable files directly.
• Whitelist findings: Suppress alarms for selected files and database entries.

Manage scans and website security

• Advanced scan filters: Include or exclude directories and apply custom regular-expression signatures to files and databases.
• WP-CLI: Run scans and security tasks from the command line, including asynchronous scans, definition synchronization, checksum refresh, and reporting. This can help when a compromised site is blocked by its host or the administrator cannot log in to WordPress.
• Definition updates: An hourly cron process checks for current definitions without requiring manual updates.
• File Inspector: Review files inline instead of switching to FTP, SSH, or a file manager.
• Client reporting: Copy scan results to the clipboard.
• PHP diagnostics: View the full PHP configuration.
• Factory reset: Reset the add-on with one click.
• Premium support: Get direct access to security analysts.

Use scheduled scans and alerts to keep monitoring the site. Filters and custom signatures can narrow scans to relevant directories or file and database patterns; the inline inspector and clipboard reporting support troubleshooting and client-service work.