內容簡介
Yuga AntiMalware 是一款專為管理員設計的外掛，旨在檢測 WordPress 網站中的可疑惡意程式指標並支援修復工作流程，確保網站安全。
【主要功能】
• 多種掃描模式：快速掃描、針對性掃描、資料庫掃描等
• 自動化快速掃描：透過 WP-Cron 定期執行
• 可疑內容清理：依作者、類別等篩選
• 隔離庫存檢視：管理被隔離的檔案
• 垃圾清理工具：永久移除 WordPress 垃圾項目
• 電子郵件通知：透過 WordPress 郵件設定發送
外掛標籤
開發者團隊
原文外掛簡介
Yuga AntiMalware is an admin-focused plugin built to detect suspicious malware indicators and support remediation workflows on WordPress sites.
Main capabilities:
– Tabbed admin interface with left sidebar sections and right helper column.
– Scan modes:
– Quick scan (files in wp-content)
– Targeted scan (plugins/themes/mu-plugins/uploads/root files)
– Database scan
– Frontend scan
– Full scan (files + database + frontend)
– Optional PHP max_execution_time override for scan execution.
– Background scan execution with runtime status polling.
– Automatic quick scans through WP-Cron (hourly, daily, or weekly).
– Findings table with sorting, grouping, and file preview.
– Findings actions: ignore, exclude path, quarantine, delete, copy path.
– Reinfection Trace with database hot spots and writer candidates.
– Writer Hunt for file-level suspect correlation.
– Safe options cleanup workflow: backup + cleanup + restore rollback.
– Content Cleanup for suspicious post/page/revision rows with filters by author, category, type, language/script, and keyword.
– Content cleanup actions with rollback backups, batch-based filtered trashing, and previous revision restore for posts/pages.
– Trash Cleanup for permanently removing WordPress trash items in backed-up batches.
– Cache cleanup tools (targeted suspicious cache cleanup and full transient flush).
– Post-hack plugin/theme inventory with version checks and maintenance actions where supported.
– Quarantine inventory viewer in admin.
– Retention policy for quarantined files, applied from quarantine timestamp.
– Email notifications via default WordPress mail settings.
External Services
This plugin optionally integrates with PayPal Donate to facilitate donations. No PayPal resource is loaded until an administrator explicitly clicks the “Donate with PayPal” button on the plugin settings page.
Service Name: PayPal Donate API
Purpose: To provide a donation button through PayPal.
Data Sent:
Network and device information normally included in web requests, such as IP address and user agent
The hosted PayPal button identifier
Any payment information the administrator subsequently enters on PayPal
When: The PayPal SDK is requested only after an administrator clicks the “Donate with PayPal” button.
Service Links:
PayPal Terms of Service
PayPal Privacy Policy
Payment transactions are handled by PayPal under its own terms and privacy policy.
How to use Content Cleanup safely
Run a Database scan or Full scan first.
Open Dashboard > Content Cleanup and review the filtered suspicious post rows.
Use filters such as Author, Category, Type, Language/script, and Keyword to narrow the result set.
Prefer backup-backed actions before trashing content.
For real posts or pages that were modified, use Restore previous revision when a clean revision is available.
For suspicious revisions, move them to trash after verifying they are not needed.
Use Trash Cleanup only after confirming the trashed content should be permanently removed.
