內容簡介
最佳的 WordPress 感染清理外掛。掃描整個 WordPress 檔案和資料庫，查找惡意重新導向、病毒、惡意軟體、感染、安全威脅、特洛伊木馬、後門、dolohen、程式碼注入和超過 50,000 多種安全威脅和漏洞。它是最精確的 WordPress 惡意軟體掃描器，體積輕巧，易於使用。
不會有誤報警報。現在可以自信地清除惡意軟體。
Malcure WP Malware Scanner 掃描所有 WordPress 檔案（包括備份、檔案庫、圖像、隱藏檔案、日誌等）和資料庫，查找惡意軟體，包括 C99、R57、RootShell、dolohan、Crystal Shell、Matamu、Cybershell、W4cking、Sniper、Predator、Jackal、Phantasma、GFS、Dive、Dx 等各種變異體...我們的完全尋找感染掃描器會掃描 WordPress 安裝中的每一個檔案，以尋找安全威脅和漏洞。
Malcure WordPress Malware Scanner 無所不透，體積輕巧，易於使用和非常全面。
WordPress 惡意軟體掃描器
惡意軟體掃描器會檢查 WordPress 核心檔案、佈景主題、外掛和資料庫，以查找惡意軟體、感染、惡意重新導向和程式碼注入。
校驗/完整性檢查: 比較您網站上的核心檔案、佈景主題和外掛與 WordPress.org 儲存庫相應檔案的完整性，以檢查它們的完整性並報告任何變更，並通過自動與 WordPress Checksum API 同步。
從 Google™ Search Console 中整合警報，以及處理任何接收到的警報或通知。
針對每個感染的詳細惡意程式碼資訊。
清晰的感染分類，包括: 重新導向劫持、標題被入侵、資料庫掃描結果和 WordPress 檔案掃描結果。
檢查文件: 透過 Malware Inspector 立即檢查感染檔案。
系統狀態: 快速獲取所有重要 WordPress 和網站相關資訊的概覽。
一鍵複製結果。
保持良好的掃描日誌，供過去 30 天查閱。
高級功能:
單鍵修復、清除和放行檔案。
即時惡意軟體定義更新。
WP CLI 支援，以透過命令行進行掃描。
使用自訂定義和模式掃描新病毒變種。
忽略/掃描特定檔案和目錄以節省時間。
按此購買 Malcure 高級版！
您會喜愛以下功能:
超高精確度結果。
自動與 WordPress Checksum API 同步。
使用惡意軟體定義和病毒檢查感染。
最新和定期更新的 WordPress 惡意軟體簽名。
連接定義更新伺服器以獲取最新定義。
Malcure WordPress Malware Scanner & Firewall 是一款複雜且極為強大的工具。它簡單易用，並且產生極佳的效果。
如果您的網站有感染，請查看以下連結：
逐步指南，以清除惡意軟體。
現場 WordPress 惡意軟體感染清除和分析
惡意軟體問題是帶有時間敏感性的，最快修復被駭網站的方法是請求我們的安全專家進行惡意軟體清理。
我們
外掛標籤
開發者團隊
② 後台搜尋「Malcure Malware Shield — Removal, Repair, Monitor」→ 直接安裝（推薦）
原文外掛簡介
Is your website acting strangely? Seeing ‘Deceptive Site Ahead’ warnings, Japanese spam, SEO spam, or random redirects? Time to fix and monitor your site with Malcure Malware Shield.
Malcure Malware Shield: The Powerful Antivirus
Just as your computer requires antivirus, your website demands specialized antivirus-grade protection. Malcure Malware Shield delivers comprehensive, antivirus-style detection with advanced signatures to identify viruses, trojans, backdoors, adware, and ransomware. Unlike basic security plugins, it operates with the precision of an antivirus engine, scanning every layer of your site—from core files to the database—to ensure your website remains virus-free and secure.
Malware Removal, Hack Repair & SEO Spam Cleanup
Malware attacks are evolving. Standard scanners often miss hidden backdoors and database infections. If your current security plugin says “All Clear” but your site is still broken, you need Malcure Malware Shield.
Malcure Malware Shield is the intelligent, lightweight security solution. We believe security should be simple on the surface but deep under the hood. No complex settings. No bloat. Just activate and scan.
Lightweight, API-driven scanning runs only on demand or on scheduled scans — no persistent background processes.
Unlike scanners that delay new malware definitions for days, Malcure delivers real-time threat intelligence to every user so you’re protected against the latest threats as soon as they emerge.
What Our Users Say
Quotes are verbatim from WordPress.org support reviews, except for bracketed edits (for example, competitor names removed).
Best by far, better than [competitor name removed] and other giants
“You can see it is a bunch of geeks that created this, with skill and visual creativity at that. I spent hours trying to find a plugin like this. So many options and such bad results until now. Great job guys. You deserve it. Simple and effective. (Disclaimer to other potential readers: there are many types of hacks/malware out there, every scenario is different, but start with the Malcure scan and see how it goes. 9/10 you won’t be disappointed, my guess)” — @dalingzaf
The ONLY plugin that scans files…
“I am a web developer and have tried many malware removal plugins, including popular ones [competitor names removed]. However, none of them detected some unusual files that were actually malware causing regular attacks. Some of these files were in JPG format.” — @devzeeshanx
Best Malware Removal Plugin in just few minutes
“Most security plugins that are free only scan the code, but Malcure Malware Removal Plugin scans the wordpress database and the code files in few minutes. Accurately shows which Database table row is infected and it helps resolve the hacking attempt instantly. Saves a lot of time for the developers. Thank You Team Malcure” — @s3630
It’s not just a “teaser”
“This plugin really found the malware, and removed it. Really for free. Thanks guys, I’m going to donate now!” — @halucska
Malware Removal & Hack Repair
Checksum Verification: We verify core, plugin, and theme file integrity against the official repository checksums served by our SaaS API endpoint.
Deep Scan: If checksums fail, Malcure runs a full scan against malware detection signatures detecting estimated 50,000+ variants.
Inspect & Repair: Inspect infected database records and files. Assists in cleaning compromised files and database entries.
SEO Spam Specialist: Detects and removes the notorious “Japanese Keyword Hack” and pharma spam from your files and database, helping restore your Google rankings.
Virus Scanner & Threat Detection
Database Scan: Scans database tables for malicious injections and spam links.
File Scan: Scans core files, themes, plugins, images, and uploads for backdoors and obfuscated code.
Vulnerability Detection: Checks your core, plugins, and themes for known security flaws.
DeepScan™ Technology: Scans backups, archives, images, and hidden files where malware hides.
Ultra-High Precision: Uses intelligent checksum verification (comparing your files to official core/plugin/theme checksums) to dramatically reduce false alarms compared to heuristic-only scanners.
Intelligent Health Monitor
Always-On Guard: Continuous monitoring via Scheduled Scans (daily/weekly/monthly) configurable cadence.
Instant Alerts: Every time a scheduled scan completes, you get an instant email report telling you if your site is clean or infected.
Event Log: Track the events leading up to a malware incident for faster root-cause analysis.
Powered by Malcure API: Real-Time Threat Intelligence
Hackers don’t sleep, and neither do we. Malcure Malware Shield connects to our real-time API to fetch the latest threat definitions.
This plugin relies on the Malcure API to provide real-time threat intelligence and checksum verification.
Data Transmission: To perform scans, the plugin sends file checksums and your site’s domain to Malcure servers. No sensitive user data is transmitted.
Terms & Privacy: Use of the API is subject to our Terms of Use and Privacy Policy.
Zero-Day Alerts: Our API serves new threat-intelligence in real-time, ensuring the site is scanned against the latest vulnerabilities.
Smart Checksums: We verify your core files, themes, and plugins against the official repository checksums using our API, ensuring absolute integrity.
Lightweight: The scanner only uses minimum resources to keep your server fast and responsive.
Why Keep Malcure Malware Shield Installed?
Reinfection Risk & Continuous Monitoring
Malware cleanup is not a one-and-done task. New vulnerabilities and reinfections can appear without warning, so continuous monitoring and scheduled scans help catch issues early—before SEO damage, blacklists, or downtime. You get email notification with the results to rest assured that the site is clean or when immediate action is required.
Cleaning your site is just step one. Malcure is your anti-malware health monitor.
Continuous Monitoring: Scheduled scans watch your site for changes so you don’t have to.
Real-Time Event Log: See exactly what’s happening on your site.
Early Warning: Catch new infections before Google blacklists you.
Recurrence Prevention: Scheduled scans and integrity checks catch reinfections before they spread.
No Bloat: Designed to run on-demand or as per schedule without slowing down your site.
Who This Plugin Is For
Site owners who want clear, actionable results (what was flagged and where).
Agencies & developers who need fast triage across multiple sites.
WooCommerce / membership / lead-gen sites where downtime, SEO brand-reputation damage are expensive.
Anyone who wants a scanner that cuts through the noise to focus on signal—real threats with practical remediation paths.
How It Works (Scan → Review → Clean → Monitor)
Scan
Go to Malcure Scanner in your Admin Dashboard.
Run a scan to check your files and database for vulnerabilities, malware, backdoors, suspicious code, and integrity issues.
Review
Malcure reports findings with clear locations (file paths / database records) so you can verify what changed and why it was flagged.
Use the results to decide what should be repaired, deleted, or kept (for example, legitimate custom code).
Clean & Recover
The free edition helps you identify issues, inspect data and understand what needs fixing.
The Advanced Edition adds Whitelisting, Advanced Scan Filters, File Operations, WP CLI Automation, Deployment, Bulk Client-Servicing Features, Background Scan & Premium Support (Expertise).
Monitor
Set up scheduled scans to keep your site continuously monitored.
Get email alerts for new infections or integrity issues.
Is It Free?
We believe in 100% transparency.
Free Forever: Professional-grade Detection (Knowledge). You see every infected file and database row (exact file path & line number), so you can clean it yourself for free.
Free Forever: Real-time Threat Intelligence & Monitoring.
Pro Upgrade: Whitelisting, Advanced Scan Filters, File Operations, WP CLI Automation, Deployment, Bulk Client-Servicing Features, Background Scan & Premium Support (Expertise).
You are never forced to pay to find a hack.
Core Features (Free Forever)
Deep Malware Scan: Scans core files, themes, plugins, images, and your entire database for vulnerabilities, viruses, trojans, backdoors, and malicious redirects.
Files: Scans core files, themes, plugins, images, and uploads for backdoors, shells including variants like C99, R57, RootShell, dolohan, Crystal Shell, Matamu, Cybershell, W4cking, Sniper, Predator, Jackal, Phantasma, GFS, Dive, Dx, obfuscated code and many more known and unknown variants.
Database: Scans database tables for malicious injections, recurring malware and spam links.
SEO Spam Detection: Specifically checks page titles and database records for “Japanese Keyword Hack”, “Pharma Hack” and other SEO spam symptoms.
Vulnerability Scanner: Checks your installed plugins and themes against our real-time database of known security vulnerabilities.
Intelligent Checksum Verification: Automatically verifies your core files, themes, and plugins against the official checksums. If a file has been tampered with, we know instantly.
Uncompromising Detection: Detects variants like C99, R57, RootShell, dolohan, Crystal Shell, Matamu, Cybershell, W4cking, Sniper, Predator, Jackal, Phantasma, GFS, Dive, Dx, obfuscated code and many more known and unknown variants.
Attack Surface Hardening & Firewall:
Block Path Traversal: Stops attackers from accessing sensitive system files.
Block PHP Uploads: Prevents malicious scripts from being uploaded to your site.
Stop User Enumeration: Blocks bots from fishing for your username.
REST API Protection: Prevents user data leakage via the WP REST API.
Security Hardening: Learn more about securing your site.
Recurrence Watchdog (Background Monitor):
Set it and forget it: Malcure runs silently in the background using scheduled scans (configurable cadence) + integrity baseline to monitor changes.
Stay Ahead: Automatically catch new infections before they spread or damage your SEO rankings.
Incident Response Toolkit:
Nuke User Sessions: Instantly force-logout every user on the site to kick out intruders.
Salt Shuffler: One-click rotation of security keys (salts) to invalidate all browser cookies.
Forensic Flight Recorder (Event Log): Track every security event. Know exactly when and how a breach might have occurred with our 100-day event log.
Google Search Console Integration: Connect directly to Google to fetch security warnings and blacklist status in real-time.
Real-Time API Updates: Connects to the Malcure Cloud to fetch the latest threats and vulnerabilities.
Upgrade to Advanced Edition
For mission-critical websites that demand comprehensive protection and recovery tools.
1-Click Surgical Repair: Inspect, Delete, or Repair infected files instantly.
Advanced Whitelisting: Stop false alarms. Supports files, folders, and Database Records.
WP-CLI Integration: Complete command-line control for automated scanning and reporting.
Automatic Definition Updates: Definitions update automatically in the background.
On-Demand Background Scans: Trigger deep scans immediately without keeping your browser open.
Advanced Scan Filters: For when you are specifically looking for something in the files or database or want to include, exclude specific files & directories
File Operations: Critical file operations like deletion.
Bulk Client-Servicing Features: Like copying scan results to generate report for clients.
Background Scan: For when you want to trigger a scan and forget it. The scan continues and emails you upon completion.
Premium Support (Expertise): When you want to consult or want to exploit advanced features or need help troubleshooting.
High-Priority Support: Direct access to our security analysts.
Get Malcure Advanced Edition
Additional Resources for Malware Removal
Follow these expert guides to remove malware, recover lost traffic, and restore your online reputation:
A step by step guide to remove the malware
Japanese Keyword Hack: How to Remove SEO Spam
What is the Pharma Hack & How to fix it
How to Fix Google Ads Disapproved for Malicious Software
How to Prevent SQL Injection Attacks
Live Malware Infection Removal & Analysis
How to Fix “This Site May Harm Your Computer” Warning
Comprehensive Guide to Removing JavaScript Redirect Malware
How to Fix a Blank WP-Admin Page
Malcure WP CLI Integration & Cheatsheet
How to Prevent Brute Force Attacks
How to Change Salt Keys
Expert Malware Removal Service
In over your head? Our security analysts are on standby. We offer a complete Malware Removal Service that includes:
100% Removal Guarantee: We guarantee to remove all malware from your website.
Same Day Service: Fast turnaround time to get your business back online.
Manual Inspection: Our experts manually inspect critical files (htaccess, wp-config, index.php) and your database.
Blacklist Removal: We handle the removal of your site from blacklists like Google, Norton, McAfee, etc.
Security Hardening: We identify the root cause and patch vulnerabilities to prevent future infections.
15-Day Cover: Security analysts available 24/7/365 to ensure your site stays clean.
Book Expert Malware Removal
Troubleshooting
Some files are detected by Malcure Malware Shield as “suspicious”. What gives?
Malcure’s DeepScan checks each file for malware. However some files aren’t pure malware but may contain code that is suspicious and could potentially do nasty things. You should carefully review and analyse them to see if they indeed do anything nasty.
I can’t get Malcure Malware Shield to work. It hangs / doesn’t complete the scan / breaks for some reason.
If you think that the plugin is broken, please report it here.
Malcure Malware Shield (or for that matter other plugins) may break on malware affected / broken websites. Malcure Advanced Edition integrates with WP CLI and allows you to complete the scan from WP CLI even when the site is blocked by the webhost or when you are unable to login to the website.
My site is infected however Malcure Malware Shield doesn’t detect the infection.
Malware keeps evolving. If you come across malware that Malcure Malware Shield is not able to identify, you may please report it here.
The scan gets stuck midway. What should I do?
In case of such an event, please file a support request with us and we’ll be more than happy to troubleshoot the issue.
Please visit this page.
I cleaned my site but it got infected again. What should I do?
Malware cleanup is a waste of time and effort unless you find the root cause behind the malware infection and monitor for recurrence. How was someone able to infect your website? Have you plugged in that security hole?
Please read Why Do Websites Get Hacked.
Google Safe Browsing site status (or some other scanner) still shows my site as infected. What should I do?
First make sure you purge your site cache. Second, Google (and other scanners) cache the results for some time. You’ll need to force or refresh the scan. You can also file a request with us to get your site off any blacklists.
I found a suspicious file, what now?
If Malcure flags it, it’s likely malicious. You can inspect the file content using our built-in inspector. If you’re unsure, consider our Expert Malware Removal Service.
