Title: Malcure Malware Shield — Removal, Repair, Monitor Author: Malcure Web Security Published: 10.7.2018 Last modified: 12.10.2026 --- Hae lisäosia ![](https://ps.w.org/wp-malware-removal/assets/banner-772x250.png?rev=3602044) ![](https://ps.w.org/wp-malware-removal/assets/icon.svg?rev=3604995) # Malcure Malware Shield — Removal, Repair, Monitor [Malcure Web Security](https://profiles.wordpress.org/malcure/) [Lataa](https://downloads.wordpress.org/plugin/wp-malware-removal.19.9.9.zip) * [Tiedot](https://fi.wordpress.org/plugins/wp-malware-removal/#description) * [Arvostelut](https://fi.wordpress.org/plugins/wp-malware-removal/#reviews) * [Asennus](https://fi.wordpress.org/plugins/wp-malware-removal/#installation) * [Kehitys](https://fi.wordpress.org/plugins/wp-malware-removal/#developers) [Tuki](https://wordpress.org/support/plugin/wp-malware-removal/) ## Kuvaus Scans site files, realtime file-uploads, the database, and user accounts for malware, and reports each finding by file path or database record. Schedule automatic scans and email alerts. A free Malcure Cloud connection is required. ## Kuvankaappaukset [⌊Start a scan in one click. Simple.⌉⌊Start a scan in one click. Simple.⌉[ Start a scan in one click. Simple. [⌊Scan in progress, detecting malware.⌉⌊Scan in progress, detecting malware.⌉[ Scan in progress, detecting malware. [⌊Database scan results.⌉⌊Database scan results.⌉[ Database scan results. [⌊Real-time Monitoring.⌉⌊Real-time Monitoring.⌉[ Real-time Monitoring. [⌊Event Log showing security-relevant site activity (updates and actions).⌉⌊Event Log showing security-relevant site activity (updates and actions).⌉[ Event Log showing security-relevant site activity (updates and actions). [⌊Scan filters to help narrow results by type and severity.⌉⌊Scan filters to help narrow results by type and severity.⌉[ Scan filters to help narrow results by type and severity. [⌊File Inspector to review suspicious or infected files.⌉⌊File Inspector to review suspicious or infected files.⌉[ File Inspector to review suspicious or infected files. [⌊Scan Log / activity history to track what ran and when.⌉⌊Scan Log / activity history to track what ran and when.⌉[ Scan Log / activity history to track what ran and when. [⌊Hardening settings and firewall rules.⌉⌊Hardening settings and firewall rules.⌉[ Hardening settings and firewall rules. [⌊Running scans via WP-CLI.⌉⌊Running scans via WP-CLI.⌉[ Running scans via WP-CLI. [⌊Reviewing scan results via WP-CLI.⌉⌊Reviewing scan results via WP-CLI.⌉[ Reviewing scan results via WP-CLI. ## Asennus 1. Upload the `wp-malware-removal` folder to the `/wp-content/plugins/` directory. 2. Activate the plugin through the ’Plugins’ menu in Admin Dashboard. 3. Open the Malcure menu and follow the simple wizard to start your first scan. ## UKK ### Do I need to register? Yes. A free registration is required for the plugin to function. It is done inside your dashboard, under fair use to prevent abuse. ### Where can I find the Malcure Terms of Use and Privacy Policy? These are available on our website: [Terms of Use](https://malcure.com/?p=1720) and [Privacy Policy](https://malcure.com/?p=3) ## Arvostelut ![](https://secure.gravatar.com/avatar/4528c89085976f6b9d178da34dffcec20bdac4e9f41f9e1a473c4b6d4e02704d? s=60&d=retro&r=g) ### 󠀁[Unprofessional credential demands, rigid script-based support, and a lack of und](https://wordpress.org/support/topic/unprofessional-credential-demands-rigid-script-based-support-and-a-lack-of-und/)󠁿 [phillalf](https://profiles.wordpress.org/phillalf/) 25.9.2026 Malcure claims to be a website security company, yet their remediation process violates fundamental cybersecurity best practices. Demanding Master Account Logins: When hired to clean a single domain, their support team insisted on being handed the master logins to the primary IONOS Hosting Account. Handing over master access grants a third party full control over all domains, billing details, and unrelated client sites under that contract. Professional security firms use isolated access vectors, never master credentials. Inability to Adapt to Server Firewalls: Malcure rigidly demanded direct, external network access to the site's MySQL database. On secure cloud hosting like IONOS, databases are hidden behind strict internal firewalls that block outside IP addresses for safety. Malcure’s technicians refused to acknowledge this standard infrastructure limitation. Ignoring Full Developer Access: Even when provided with a comprehensive security package—including isolated SFTP access, a WordPress Administrator login, and a raw .sql database export file—Malcure refused to proceed. Because WordPress admin panels run locally inside the host's network loop, any standard security plugin can scan and clean the database internally. Malcure's refusal to work with these industry-standard assets suggests they rely blindly on automated external scripts rather than true technical expertise. Blame-Shifting and Stalling: By demanding impossible firewall openings and insecure master logins, the company sets up a convenient excuse ("the client denied us access") to justify delays or refuse refunds when they cannot fulfill their service. 💡 The Verdict If you value the security of your hosting infrastructure, avoid Malcure. Their rigid playbooks, unsafe credential requirements, and poor handling of shared hosting environments make them a liability rather than a security solution. If you have already paid them and they refuse to work using standard SFTP and WordPress Admin access, revoke their access immediately and file a dispute with your bank or PayPal for "Services Not Rendered." ![](https://secure.gravatar.com/avatar/336ad2291b0166a9a1f922ba5bc679ae8a474ffea6026cfca4f2020a43d417e7? s=60&d=retro&r=g) ### 󠀁[Not working i have just tested with an hacked website](https://wordpress.org/support/topic/not-working-i-have-just-tested-with-an-hacked-website/)󠁿 [Appsfruit](https://profiles.wordpress.org/appsfruit/) 22.7.2026 1 reply Not working i have just tested with an hacked website not a single issues has been find out by the plugin. ![](https://secure.gravatar.com/avatar/9d96b7d87702b38265690be435e2c73be8df5f5b8f02eccb3d9020ac68a168ac? s=60&d=retro&r=g) ### 󠀁[great, slow at first, but gets fast with next turns](https://wordpress.org/support/topic/great-slow-but-gets-fast-with-next-turns/)󠁿 [nenadvuk](https://profiles.wordpress.org/nenadvuk/) 30.4.2026 fantastic. it lasts long, needs 3-4 scan turns, but it cleans malware. But the first scan is longest, every other gets faster. Tried 5 different plugins, this is the only one that hepled me out and identified malware. Sent them unidentified malware I found myself and they updated their definitions within 4 hours! After days of trouble, within 3 days it seems I got rid of malware on 6 sites. great ![](https://secure.gravatar.com/avatar/6da0f6ba979994ebf9419621891ddb735407e932c6ec0f0747f356ae43b4b1ae? s=60&d=retro&r=g) ### 󠀁[Saved my a**](https://wordpress.org/support/topic/saved-my-a-12/)󠁿 [groso](https://profiles.wordpress.org/groso/) 23.4.2026 Thanks a lot for your work which we are allowed to use for free. Works very good, don't know if it really, really finds ALL malware – but who knows?! ![](https://secure.gravatar.com/avatar/1f6393903c63001dc0e5ae856ce90caf107953bb4e11269bc35e823660b07292? s=60&d=retro&r=g) ### 󠀁[Love and hate !!!!!!](https://wordpress.org/support/topic/love-and-hate/)󠁿 [Jonathan Sin](https://profiles.wordpress.org/jonathansin/) 12.4.2026 It's so annoying!!! Many positions force me to do things, like paying for upgrades. ![](https://secure.gravatar.com/avatar/ecb7d5267dae264db6943081583279b8c09abea7e2b468c238d7f1f1de419d99? s=60&d=retro&r=g) ### 󠀁[Best of all i’ve tried](https://wordpress.org/support/topic/best-of-all-ive-tried-2/)󠁿 [sdesan](https://profiles.wordpress.org/sdesan/) 15.2.2026 good database scangood file scangood problems explication: it's possible to resolve a lot of problem using file editor and MySQL editing [ Lue kaikki 74 arvostelua. ](https://wordpress.org/support/plugin/wp-malware-removal/reviews/) ## Avustajat & Kehittäjät “Malcure Malware Shield — Removal, Repair, Monitor” perustuu avoimeen lähdekoodiin. Seuraavat henkilöt ovat osallistuneet tämän lisäosan kehittämiseen. Avustajat * [ Malcure Web Security ](https://profiles.wordpress.org/malcure/) * [ cybermalcure ](https://profiles.wordpress.org/cybermalcure/) [Käännä “Malcure Malware Shield — Removal, Repair, Monitor” omalle kielellesi.](https://translate.wordpress.org/projects/wp-plugins/wp-malware-removal) ### Oletko kiinnostunut kehitystyöstä? [Browse the code](https://plugins.trac.wordpress.org/browser/wp-malware-removal/), check out the [SVN repository](https://plugins.svn.wordpress.org/wp-malware-removal/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/wp-malware-removal/) by [RSS](https://plugins.trac.wordpress.org/log/wp-malware-removal/?limit=100&mode=stop_on_copy&format=rss). ## Muutosloki #### 19.9.9 * Feature: Onboarding wizard for unregistered sites. * Improvement: WP-CLI — `--mcforce` skips prompts (`--dry-run` takes priority); scan logs are JSON-only. * Minor: Scheduled scans validate choices; duplicated scanner/CTA code cleanup; user scan labels ”email missing”/”email invalid”. #### 19.9.8 * Feature: WP-CLI remediation suite — repair, delete, whitelist management, and nuke-files from the command line. #### 19.9.7 * Security: Hardened AJAX surface. Credits: Charles Vosburgh * Security: Added Multisite capability gate for remediation actions. Credits: Charles Vosburgh * Security: Added content verification and symlink detection for file repair. Credits: Charles Vosburgh * Feature: DeepScan uploads. * Improvement: Enhanced Event Logging. * Bugfix: Self-healing scheduled scan cron. * Bugfix: Self-healing scheduled scan cron when the plugin is reactivated. #### 19.9.6 * Bugfix: Compatibility with PHP 5.6. * Bugfix: User Scan resolves actual capabilities. #### 19.9.5 * Bugfix: Fixed scanner not auto-updating definitions before scans. * Feature: Email notification preferences. #### 19.9.4.1 * Bugfix: Fixed fatal javascript error. #### 19.9.4 * Feature: User Account Audit results in scans. * Feature: SaaS-Served File Whitelist. * Improvement: Enhanced Event Logging. * Improvement: First-run UX performance optimisation. * Bugfix: Some UI elements were not styled correctly under certain conditions. * Bugfix: Cleaned results would not reflect in Stateful scanner. #### 19.9.3 * Improvement: Stateful scanner now self-heals its monitor cron if WordPress cron is lost (e.g. after a server reboot). #### 19.9.2 * Hardening: Strengthens scan input validation and database-query sanitisation for safer scans. * Stability: Improves runtime handling and diagnostics reliability during scans. #### 19.9.1 * Bugfix: Smaller files were being ignored during monitoring / scheduled scans. * Improvement: Improved `wp malcure sync --mcforce` feedback and live definitions refresh behavior. * Stability: More reliable definitions updates across admin and WP-CLI workflows. * UX: Clearer manual definitions update errors in the admin UI. * Feature: Added WP-CLI definitions export and import commands for moving definitions between environments. * Feature: Added `wp malcure refresh-checksums` for on-demand official core, plugin, and theme checksum refresh. * Feature: Added `wp malcure start-async-scan`, `cancel-async-scan`, and `status- async-scan`, with text and JSON status output. * Improvement: CLI commands are properly documented. #### 19.9 * Feature: Malware definitions are now checked hourly for faster threat-intelligence updates. * Stability: Reduced unnecessary SaaS requests with smarter local freshness checks before contacting the API. * Improvement: Admin and WP-CLI now use the same definitions-check flow and record the last successful definitions check for more consistent refresh behavior. * Improvement: Diagnostics now flag MySQL settings that can interrupt large definition updates and database scans. #### 19.8 * Bugfix: Scheduled scanning wouldn’t ignore whitelisted items. * Several UI fixes. #### 19.7 * Major Bugfix: In certain conditions unknown files inside core directories were never reported. * Bugfix: Fixed styles for Monitoring UI. #### 19.6 * Fixed issues not clearing when initializing scan. * Fixed low confidence issues being saved. * Fixed database issues not being saved. * Fixed compatibility testing transients. * Minor UI improvements. * Updated readme with respect to recent features, functionality and updates. #### 19.5 * New: Clearer admin UI labeling. * Bugfix: Styles not loading on Scan Scheduler page. * Stability: Several other stability fixes. #### 19.4 * Major Bugfix: Fatal error during auto-upgrade. * Updated readme. #### 19.3 * Major Bugfix: The very initial database record was never scanned. * Feature: New DB-record inspection + (Advanced Edition) DB-record whitelisting. * Improvement: Smart Checksum Refresh — Updates only modified components during upgrades for faster performance. * Major: Checksum system overhaul: more robust payload handling, better core vs non-core validation, and automatic checksum refresh after WP/plugin/theme upgrades. #### 19.2 * Feature: Major performance optimization for checksums. * Feature: Enhanced SaaS API integration with signature verification. * Feature: Compatibility check for plugin version. * UX: Improved license validation and error messages. * UX: Better handling of database vs file infections in UI. #### 19.1 * Feature: Introducing enhanced cleanup operations. #### 19.0 * Bugfix: Enhanced detection of suspicious empty files in core directories. ## Metatiedot * Version **19.9.9** * Last updated **10 tuntia sitten** * Active installations **10 000+** * WordPress version ** 6.2 or higher ** * Tested up to **7.1.3** * PHP version ** 5.6 or higher ** * Language * [English (US)](https://wordpress.org/plugins/wp-malware-removal/) * Tags * [antivirus](https://fi.wordpress.org/plugins/tags/antivirus/)[malware scanner](https://fi.wordpress.org/plugins/tags/malware-scanner/) [security](https://fi.wordpress.org/plugins/tags/security/)[virus](https://fi.wordpress.org/plugins/tags/virus/) [vulnerability scanner](https://fi.wordpress.org/plugins/tags/vulnerability-scanner/) * [Edistynyt näkymä](https://fi.wordpress.org/plugins/wp-malware-removal/advanced/) ## Arvosanat 4.4 out of 5 stars. * [ 61 5-star reviews ](https://wordpress.org/support/plugin/wp-malware-removal/reviews/?filter=5) * [ 1 4-star review ](https://wordpress.org/support/plugin/wp-malware-removal/reviews/?filter=4) * [ 1 3-star review ](https://wordpress.org/support/plugin/wp-malware-removal/reviews/?filter=3) * [ 1 2-star review ](https://wordpress.org/support/plugin/wp-malware-removal/reviews/?filter=2) * [ 10 1-star reviews ](https://wordpress.org/support/plugin/wp-malware-removal/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/wp-malware-removal/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/wp-malware-removal/reviews/) ## Avustajat * [ Malcure Web Security ](https://profiles.wordpress.org/malcure/) * [ cybermalcure ](https://profiles.wordpress.org/cybermalcure/) ## Tuki Onko sinulla jotain sanottavaa? Tarvitsetko apua? [Tukifoorumi](https://wordpress.org/support/plugin/wp-malware-removal/)