Title: AMWScan Antimalware Scanner Lite Author: Marco Cesarato Published: 4. september, 2026 Last modified: 5. september, 2026 --- Søg plugins ![](https://ps.w.org/amwscan/assets/banner-772x250.png?rev=3680934) ![](https://ps.w.org/amwscan/assets/icon-256x256.png?rev=3681213) # AMWScan Antimalware Scanner Lite Af [Marco Cesarato](https://profiles.wordpress.org/marcocesarato1/) [Download](https://downloads.wordpress.org/plugin/amwscan.0.3.1.zip) * [Detaljer](https://da.wordpress.org/plugins/amwscan/#description) * [Vurderinger](https://da.wordpress.org/plugins/amwscan/#reviews) * [Installation](https://da.wordpress.org/plugins/amwscan/#installation) * [Udvikling](https://da.wordpress.org/plugins/amwscan/#developers) [Support](https://wordpress.org/support/plugin/amwscan/) ## Beskrivelse Protect your WordPress site with the free AMWScan PHP antimalware engine, managed from a clear administrator-only workspace. AMWScan Antimalware Scanner Lite checks uploads before WordPress accepts them, runs deep scans on demand or on schedule, and turns each finding into a report you can review and act on. #### Block threats at upload Upload protection is enabled by default. It scans media and plugin or theme ZIP packages before WordPress accepts them. Detected files and uploads that cannot be scanned completely are blocked, and their reports are retained for review. ZIP inspection requires the PHP ZIP extension; administrators can disable upload protection under Antimalware > Settings > Scan policy. #### Scan on your schedule * Choose manual scans or precisely scheduled background scans. * Follow live checked-file progress, scan rate, and estimated time remaining. * Resume interrupted scans instead of starting over. * Receive security finding alerts and see recent activity in the WordPress dashboard widget. * See unresolved security findings in the administrator toolbar and open reports with one click. * Monitor incoming WordPress requests against a curated local indicator file and review matches without automatically blocking visitors. * Browse local folders or connect to read-only FTP/FTPS sources. #### See the whole security picture AMWScan organizes canonical findings so you can distinguish malware from other security risks without sorting through duplicate results. * Detect suspicious code and signatures under Malware detections, shown once and collapsed until you open them. * Review integrity, vulnerability, and reputation checks together under Security findings. * Use lifecycle exceptions to manage known findings without losing their history. * Opt in to bounded ZIP content scanning under Antimalware > Settings > Scope and limits. Archives that exceed the safety limits are reported as incomplete coverage. #### Review and remediate with confidence Responsive reports make findings easy to filter and inspect across desktop and mobile screens. Report-only scanning is enabled by default, so a scan does not change files unless you choose a remediation action. From the dashboard, review scan history, manage the whitelist and quarantine, create backups, and apply supported automatic fixes. File-changing actions require explicit confirmation. Responsibility and backup warnings appear when automatic actions are enabled or saved and before report remediation or quarantine deletion. Lite can quarantine files and permanently delete them after confirmation, but it cannot restore them. #### Built for WordPress administration Only administrators with the `manage_options` capability can access AMWScan. The About page lists installed plugin and engine versions alongside documentation, support, contribution guidance, licensing, and project credits. The plugin follows the WordPress site language. It includes bundled Italian, German, French, Spanish, Russian, Chinese, Japanese, Hindi, and Arabic translations, with English as the source and fallback. WordPress uses a matching WordPress.org language pack when available, then the bundled catalog. Arabic and other right-to-left locales receive a mirrored admin layout while file paths and hashes remain left-to-right. #### Lite and Full editions AMWScan Antimalware Scanner Lite is packaged independently for WordPress.org and contains no browser file editor or quarantined-file restoration code. Install only one AMWScan edition at a time. Browser file editing and quarantined-file restoration are available only in the Full GitHub edition. #### Interested in development? Follow development, report issues, contribute, and download the Full edition on GitHub: https://github.com/marcocesarato/PHP-Antimalware-Scanner Open Antimalware > About after installation to explore the plugin and its project resources. ## Skærmbilleder [⌊Advanced scan report with severity filters, security and malware findings, exception controls, bulk remediation, and expanded evidence.⌉⌊Advanced scan report with severity filters, security and malware findings, exception controls, bulk remediation, and expanded evidence.⌉[ Advanced scan report with severity filters, security and malware findings, exception controls, bulk remediation, and expanded evidence. [⌊Dashboard overview with daily manual and scheduled scan activity, live policy status, security metrics, and recent reports.⌉⌊Dashboard overview with daily manual and scheduled scan activity, live policy status, security metrics, and recent reports .⌉[ Dashboard overview with daily manual and scheduled scan activity, live policy status, security metrics, and recent reports. [⌊Report history for reviewing previous scans, durations, file counts, and detected threats.⌉⌊Report history for reviewing previous scans, durations, file counts, and detected threats.⌉[ Report history for reviewing previous scans, durations, file counts, and detected threats. [⌊Quarantine manager with isolated-file metadata and permanent deletion controls.⌉⌊ Quarantine manager with isolated-file metadata and permanent deletion controls.⌉[ Quarantine manager with isolated-file metadata and permanent deletion controls. [⌊Whitelist manager with reviewed detection matches and removal controls.⌉⌊Whitelist manager with reviewed detection matches and removal controls.⌉[ Whitelist manager with reviewed detection matches and removal controls. [⌊Complete advanced settings for scheduling, notifications, file coverage, resumable scans, backups, and logging.⌉⌊Complete advanced settings for scheduling, notifications, file coverage, resumable scans, backups, and logging.⌉[ Complete advanced settings for scheduling, notifications, file coverage, resumable scans, backups, and logging. [⌊About page with version details, project resources, documentation, and support links.⌉⌊About page with version details, project resources, documentation, and support links.⌉[ About page with version details, project resources, documentation, and support links. [⌊Traffic console with seven-day metrics, request activity, filters, privacy-reduced evidence, and CSV export.⌉⌊Traffic console with seven-day metrics, request activity, filters, privacy-reduced evidence, and CSV export.⌉[ Traffic console with seven-day metrics, request activity, filters, privacy-reduced evidence, and CSV export. [⌊WordPress dashboard widget with scanner health, recent traffic matches, report access, and scan shortcuts.⌉⌊WordPress dashboard widget with scanner health, recent traffic matches, report access, and scan shortcuts.⌉[ WordPress dashboard widget with scanner health, recent traffic matches, report access, and scan shortcuts. ## Installation 1. For a source checkout, run `composer install --no-dev --optimize-autoloader` in the plugin directory. 2. Upload the complete plugin directory, including `vendor`, to `/wp-content/plugins/ amwscan`. 3. Activate AMWScan Antimalware Scanner Lite in WordPress. 4. Open Antimalware > Settings, verify the scan and storage paths, then run a report- only scan. ## FAQ ### Why is a queued scan not starting immediately? WordPress cron runs when the site receives requests. Configure a system cron that runs `wp cron event run --due-now` when exact timing is required. ### How does upload protection work? Scan and block malicious WordPress uploads is enabled by default under Antimalware > Settings > Scan policy. The plugin scans temporary media, plugin, and theme uploads in report-only mode before WordPress stores or installs them. Malware detections and incomplete scans block the upload. Plugin and theme ZIP inspection requires the PHP ZIP extension. ### How do email alerts work? Enable Email alerts under Antimalware > Settings. The plugin uses `wp_mail` to notify the WordPress administrator when a completed scan contains unresolved security findings. You can add up to 20 optional recipients. Messages include scan counts and a protected report link, but no local paths or matched code. ### How does traffic detection work? Enable request monitoring under Antimalware > Settings > Traffic detection. Built- in heuristics detect conservative traversal, sensitive-file, exploit-path, scanner user-agent, and unexpected-method probes. An optional curated local indicator file enriches detection with IP addresses, CIDR ranges, domains, URLs, paths, and explicit ua: fragments. Plain-text lists and CSV files with trail, info, and reference columns are supported. Files are limited to 10 MB and 100,000 records. AMWScan does not bundle or automatically download indicator data; ensure your data license permits local use. This passive monitor checks only requests that reach WordPress. It does not inspect DNS, TLS, arbitrary ports, static-file traffic, rejected connections, or outbound traffic, and it never blocks visitors. Query strings are discarded, source addresses are reduced to network prefixes, duplicate detections are suppressed for five minutes, and the latest 200 detections appear in the dashboard and Traffic console. The console provides seven-day severity and category summaries, filters, and a defanged CSV export. ### Where are reports, definitions, and quarantined files stored? By default in an `amwscan-data` directory beside the web document root and outside the scanned tree. If that parent is not writable, the plugin uses a protected, site- scoped directory under WordPress’s temporary root. The host can clear temporary storage or discard it with a container, so configure persistent external paths before relying on quarantine, backups, or retained reports. Each scan checks definition metadata and downloads changed data; a failed update keeps the last verified cache. Enable Use cached or embedded definitions without updating under Antimalware > Settings > Engine and storage to prevent update requests. ### Does the plugin scan its own files? No. The active AMWScan plugin directory and its private data directory are always excluded from scans. ### How do I scan an FTP server? Enable the PHP FTP extension, select FTP server under Antimalware > Settings, and enter a credential-free `ftps://host/path` URL. Set `AMWSCAN_FTP_PASSWORD` in the WordPress PHP process environment when authentication requires a password. Use FTPS for authenticated scans because plain FTP is unencrypted. Remote scans are read- only, and passwords are never stored in WordPress. ### Does uninstall delete security data? No. Reports, logs, backups, quarantined files, and the whitelist are preserved. WordPress options and scheduled events are removed. ### How can I contribute a detection? Open a report finding and select Report finding. The plugin opens a public GitHub issue draft from legacy matches or canonical malware file signatures, containing signature names, detection types, scanner versions, and the file SHA-256 only. It excludes local paths and matched code. Do not attach executable malware to a public issue; maintainers can arrange a private transfer if they need the sample. ### How can I contribute a translation? Use the WordPress.org translation project for reviewed locale packs. The source template is `languages/amwscan.pot`. ## Anmeldelser Der er ingen anmeldelser for denne widget. ## Bidragsydere & udviklere “AMWScan Antimalware Scanner Lite” er open source-software. Følgende personer har bidraget til dette plugin. Bidragsydere * [ Marco Cesarato ](https://profiles.wordpress.org/marcocesarato1/) “AMWScan Antimalware Scanner Lite” er blevet oversat til 1 sprog. Tak til [oversætterne](https://translate.wordpress.org/projects/wp-plugins/amwscan/contributors) for deres bidrag. [Oversæt “AMWScan Antimalware Scanner Lite” til dit eget sprog.](https://translate.wordpress.org/projects/wp-plugins/amwscan) ### Interesseret i udvikling? [Gennemse koden](https://plugins.trac.wordpress.org/browser/amwscan/), tjek [SVN repository](https://plugins.svn.wordpress.org/amwscan/), eller abonner på [udviklerloggen](https://plugins.trac.wordpress.org/log/amwscan/) via [RSS](https://plugins.trac.wordpress.org/log/amwscan/?limit=100&mode=stop_on_copy&format=rss). ## Ændringslog #### 0.3.1 * See the GitHub release notes for this version. #### 0.3.0 * See the GitHub release notes for this version. #### 0.2.7 * See the GitHub release notes for this version. #### 0.2.6 * See the GitHub release notes for this version. #### 0.2.5 * See the GitHub release notes for this version. #### 0.2.4 * See the GitHub release notes for this version. #### 0.2.3 * See the GitHub release notes for this version. #### 0.2.2 * Rename the plugin to AMWScan Antimalware Scanner. * Remove browser code editing and quarantined-file restoration for WordPress.org directory compliance. * Pass all WordPress Plugin Check categories without errors or warnings. #### 0.2.1 * Follow the WordPress site language and remove the plugin-specific language override. * Improve the WordPress admin experience with clearer navigation, responsive reports, collapsible settings, and initially collapsed malware detections. #### 0.2.0 * See the GitHub release notes for this version. #### 0.1.1 * Add upload scanning and configurable archive scanning safeguards. #### 0.1.0 * Initial free plugin with scheduled background scans, live scan status, CLI-equivalent settings, report exploration, browser editing, automatic fixes, whitelist management, and protected remediation actions. ## Meta * Version **0.3.1** * Senest opdateret **51 minutter siden** * Aktive installationer **Færre end 10** * WordPress-version ** 5.3 eller højere ** * Testet op til **7.1** * PHP-version ** 7.4 eller højere ** * Sprog * [English (US)](https://wordpress.org/plugins/amwscan/) og [Russian](https://ru.wordpress.org/plugins/amwscan/). * [Oversæt til dit sprog](https://translate.wordpress.org/projects/wp-plugins/amwscan) * Tags * [antimalware](https://da.wordpress.org/plugins/tags/antimalware/)[antivirus](https://da.wordpress.org/plugins/tags/antivirus/) [malware](https://da.wordpress.org/plugins/tags/malware/)[scanner](https://da.wordpress.org/plugins/tags/scanner/) [security](https://da.wordpress.org/plugins/tags/security/) * [Avanceret visning](https://da.wordpress.org/plugins/amwscan/advanced/) ## Bedømmelser Der er endnu ikke indsendt nogen anmeldelser. [Din anmeldelse](https://wordpress.org/support/plugin/amwscan/reviews/#new-post) [Se alle anmeldelser](https://wordpress.org/support/plugin/amwscan/reviews/) ## Bidragsydere * [ Marco Cesarato ](https://profiles.wordpress.org/marcocesarato1/) ## Support Har du noget at sige? Har du brug for hjælp? [Vis supportforum](https://wordpress.org/support/plugin/amwscan/)