MalwareCheck: Free WordPress Malware Scanner That Only Reports

What MalwareCheck does

MalwareCheck scans your WordPress site and tells you, in plain words, what it found, why it was flagged and what needs doing about it. It checks core files against the official checksums, plugin, theme and uploads files against known malicious code, administrator accounts, scheduled tasks, posts, redirect rules and configuration files. It never removes, replaces or changes anything. One site can act as a hub that lists every other site you look after, worst first.

Features

• WordPress core files checked against the official checksums for your version
• Plugin, theme and root PHP files checked against known malicious code
• Executable files in the uploads folder
• Changes since the first scan, split into what an update explains and what nothing explains
• Administrator accounts, scheduled tasks, injected scripts, redirect rules and configuration files
• A daily scan, and an email when something new and serious turns up
• One hub table for many sites, worst first, with a CSV export
• A printable health report with the date the site has been clean since

Pricing

MalwareCheck is free. Download it with your name and email; there is no licence to buy and no subscription.

The boundary, stated plainly

MalwareCheck reports. It has no remove, replace, restore or quarantine function, and a clean scan means none of its checks matched. It is a scan result, not a guarantee.