Md. Habibur Rahman

Themepaste

Deep Malware Cleaner is a lightweight deep malware scanner built for WordPress. It performs a thorough deep cleanup scan of your <code>wp-content</code> directory, detects backdoors, cleans injected site scripts, fixes redirect hacks, and triggers malware auto-purge — all from your WordPress admin dashboard with no external service, no subscription, and no data ever leaving your server.
Whether you’re dealing with a live attack, a hidden backdoor, or a redirect hack silently sending visitors to malicious sites, Deep Malware Cleaner gives you the tools to scan, alert, and act — fast.
<h4>Core Capabilities</h4>
Deep Cleanup Scan 
Walks your entire <code>wp-content</code> directory, inspecting every PHP file for known malware signatures, obfuscated code, and injected payloads. Results are sorted by severity so the worst threats surface first.
Backdoor Fixer 
Detects PHP backdoors uploaded through vulnerable plugins or themes — including webshells, remote-execution scripts, and hidden PHP files inside the uploads folder where no PHP should ever exist.
Site Script Cleaner 
Identifies injected JavaScript and malicious <code><script></code> tags, hidden iframes, and obfuscated code blocks embedded in your theme or plugin files.
Redirect Hack Fix 
Flags the PHP patterns most commonly responsible for redirect hacks — including <code>header()</code> injection, variable-based shell execution, and compressed payload backdoors used to silently redirect visitors to attack sites.
Malware Auto-Purge 
Remove confirmed threats directly from the scan results screen without touching FTP or cPanel. Quarantine or delete flagged files in one click.
Login Protection 
Hardens your WordPress login against brute-force attacks and unauthorized access attempts — an essential layer of website protection alongside active scanning.
Instant Alerts 
Get notified the moment a scan finds a threat. Real-time alerts keep you informed so you can respond before an attack escalates.
<h4>What the Scanner Detects</h4>
<ul>
<li>eval(base64_decode(…)) — the most widespread PHP malware obfuscation and attack vector.</li>
<li>eval(gzinflate(…)) / eval(gzuncompress(…)) — compressed-payload backdoors.</li>
<li>eval(str_rot13(…)) — rotation-cipher obfuscated malware.</li>
<li>Shell execution with dynamic arguments — <code>shell_exec</code>, <code>passthru</code>, <code>proc_open</code>, <code>popen</code>, and <code>system</code> called with a variable, a classic attack pattern for remote code execution.</li>
<li>Hidden iframes — <code><iframe></code> elements injected with <code>display:none</code> used to load malicious content invisibly.</li>
<li>Long base64 strings — unusually large base64 blobs embedded in PHP, a common technique for hiding large attack payloads.</li>
<li>PHP files inside the uploads directory — any <code>.php</code> file in <code>wp-content/uploads/</code> is flagged High severity; legitimate uploads are never PHP files.</li>
</ul>
<h4>Key Features</h4>
<ul>
<li>Lightweight deep malware scanner — scans up to 500 files per run in under 25 seconds, safe on shared hosting.</li>
<li>On-demand scan — runs only when you click Start Scan, never in the background.</li>
<li>Deep Cleaner dashboard — at-a-glance stats: threats found, files scanned, time since last scan.</li>
<li>Website Security & Website Protection — comprehensive coverage against the most common WordPress attack types.</li>
<li>Troubleshoot mode — detailed per-file reporting to help you understand exactly what was found and why it was flagged.</li>
<li>Secure login hardening included.</li>
<li>All scan history stored in your own database — nothing leaves your server.</li>
<li>No account, no API key, no external requests.</li>
<li>Translatable — full <code>.pot</code> file included.</li>
</ul>
<h4>Who Is This For?</h4>
<ul>
<li>Site owners who received a “this site may be hacked” alert from Google.</li>
<li>Developers who need to troubleshoot a suspected redirect hack or injected script.</li>
<li>Agencies that manage multiple WordPress sites and need a fast, lightweight scanner with no SaaS dependency.</li>
<li>Anyone who wants ongoing website security and website protection without a monthly fee.</li>
</ul>
<h4>Privacy</h4>
This plugin makes zero external HTTP requests. No data is sent to any third-party server. Scan results are stored only in your own WordPress database and are removed when you uninstall the plugin (if that option is enabled in Settings).

Deep Malware Cleaner

Lightweight deep malware scanner for WordPress — deep cleanup scan, backdoor fixer, redirect hack fix, and login protection.

cleverhog

Cleverhog Malware Scanner helps you investigate a suspicious or compromised WordPress site from the admin dashboard. It is free and may be used on unlimited websites with no license keys or per-site fees.
This plugin detects and reports potential security issues. It does not automatically remove malware or guarantee that a site is clean. Always back up your site before changing or deleting files.
<h4>What it scans</h4>
<ul>
<li>Files — Pattern-based scan of themes, plugins, uploads, wp-content, or the full site (with code snippets, file size, and last-modified date)</li>
<li>Backdoors — Must-use plugins, drop-ins, wp-config, cron jobs, and suspicious hooks</li>
<li>.htaccess — Discovers <code>.htaccess</code> files site-wide and lists suspicious redirects, PHP handlers in uploads, auto_prepend, cloaking rules, and more</li>
<li>Authentication — XML-RPC, user enumeration, weak salts, file editor, and SSL-related checks</li>
<li>Database — Suspicious autoloaded options and injected post content</li>
<li>Administrators — All admin users with registration dates and risk flags</li>
<li>Updates — Outdated plugins, themes, and core (medium for major/minor updates, low for patch-only updates)</li>
<li>Plugin integrity — WordPress.org plugins compared to official checksums (one summary per plugin)</li>
</ul>
<h4>Features</h4>
<ul>
<li>Live threat counter during scans</li>
<li>Results sorted by severity (critical, high, medium, low)</li>
<li>Last scan results restored when you reopen the dashboard</li>
<li>Admin menu badge showing critical issue count</li>
<li>Excludes this plugin’s own files from file scans to reduce false positives</li>
</ul>
<h3>Privacy</h3>
This plugin runs entirely on your server. Scans do not send your site files to the plugin author.
When you run a scan, the plugin may contact:
<ul>
<li>WordPress.org (<code>downloads.wordpress.org</code>) — to fetch official plugin checksums for integrity verification</li>
<li>WordPress.org update APIs — to check for available plugin, theme, and core updates (standard WordPress behavior)</li>
</ul>
No personal data is collected by the plugin author. Scan results are stored in your WordPress database (options and transients) for display in the admin dashboard and are visible to users who can manage the site.
<h3>Support</h3>
Support is provided through the WordPress.org support forums after publication.

Cleverhog Malware Scanner

Free WordPress malware scanner by Cleverhog: detect suspicious files, backdoors, weak logins, and outdated software from your dashboard.

Deep Malware Cleaner vs Cleverhog Malware Scanner