Malware sweeps and cleanup
Weekly sweeps find what attacks leave behind; cleanup quarantines and can be restored.
Reading the result
Malware found means a definite sign (a known malware family's marker, an active malicious snippet, a hidden administrator, a webshell in a file nothing vouches for) or strong signs from two different places.
Worth a look means one clue that has a harmless explanation as often as not: a must-use file a host added, an administrator removed, a server rule from a security plugin. Check it; it is not a verdict.
Under each sweep you can say what you found (It is malware / It is not malware / Not sure). Those answers measure how often the sweep is wrong.
Clean up
- 1On the site's page open Security and press Plan cleanup. Nothing changes yet; you see every step.
- 2Press Run cleanup (account owner only). The site re-checks each step. Files go to
uploads/wpmcp-quarantine; nothing is deleted; users are reported, never deleted. - 3Anything risky (WordPress core, config, files of the active theme or plugins) becomes a by-hand step.
- 4Every cleanup can be restored from its history.
Schedule
Each site is swept weekly on its own day by default; set it to daily or off on the site's page. Sweep now runs one at once.
Related