XeroWP
Malware Scanner by Antivirus.ai – Shieldlume Security
Malware Scanner by Antivirus.ai – Shieldlume Security

Malware Scanner by Antivirus.ai – Shieldlume Security

0/5 (0 ratings) — active installs Updated Nov 8, 2026
antivirusFile Integrityfirewallmalware scannertwo factor authentication
Download v1.2.0 Plugin Website
Free dashboard with the recorded local signature catalogue, scan totals and protection choices.

Free dashboard with the recorded local signature catalogue, scan totals and protection choices.

Shieldlume Security by Antivirus.ai, from Plugins.shop, is a WordPress antivirus and malware scanner with file integrity, login protection, hardening and reviewed Free recovery. Local tools need no account, paid key or AI.

Free & Pro interface demo | Owner guide | Compare editions

WordPress malware scanning

  • Resumable checks of eligible core, plugins, themes, uploads and selected database content.
  • The harmless EICAR test marker across extensions, including .txt/.com, plus a small versioned catalog of five exact PHP webshell fingerprints.
  • Separate PHP/JavaScript heuristics, suspicious execution chains and PHP hidden in images; modified variants can be missed.
  • Automatic clear-origin WordPress.org verification after one global opt-in, using official metadata/checksums or exact-version packages. Ambiguous identities need review.
  • Added/modified/missing files grouped by plugin, theme or folder. Critical/high/review counts describe the current selection.
  • Low priority for ordinary font, image, CSS and text differences; higher priority for executable or PHP-containing files. A checksum difference alone is not infection proof.
  • Hash-bound Mark as expected decisions and explicit Ignore folder rules. Changed bytes become reviewable again; exclusions stay visible.

Free recovery and hardening

Restore official copy uses verified exact-version bytes; Quarantine removes an approved eligible source only after authenticating its encrypted backup. A local restore index keeps originals; completed/failed/cancelled owned backups become eligible for bounded daily cleanup after 30 days. Active, uncertain and unknown objects stay for review. Recovery requires POSIX ownership, Sodium, fsync, private storage and safe atomic publication; host setup may be needed. Boot/configuration and Shieldlume control-plane quarantine are refused.

18 hardening controls and five manual audits cover file editing, uploads PHP, XML-RPC, versions, user enumeration, headers, configuration access, directory listing, passwords, debug display, permissions and minor core updates. Review warnings before Apply. Undo removes only the exact owned change; unsupported server actions show manual instructions.

Sign-in, firewall and notifications

Fresh installs enable five failed sign-ins per account in 15 minutes, with backoff, and Observe firewall. A dismissible notice offers Switch firewall to Block. Upgrades retain settings. Trusted administrator exemptions/recovery do not bypass authentication or enrolled 2FA; early filtering needs host review.

Free includes authenticator 2FA, recovery codes, password plus passkey, optional administrator policies, endpoint controls, email alerts/digests and findings/coverage exports. Known conflicts may suspend login limits. Filtering covers supported WordPress requests, without CDN/DDoS protection.

Compatible Logged.ai supplies nearby local activity, subject to permissions/retention; context does not prove causation. Its finding-page installation suggestion is dismissible. Separate Pro adds automation, investigations, reports and optional connected AI using the same scanner. Free never downloads paid code.

Related plugins by Plugins.shop

Separate optional tools. More from Plugins.shop.

External services and privacy

Connections require permission/configuration; viewing panels sends nothing. No usage/conversion telemetry. Privacy/operator | Terms. Full retention/withdrawal: docs/privacy-and-services.md, privacy.txt and online disclosure.

  • Antivirus.ai welcome/newsletter: unchecked choices send domain, WordPress/PHP/language, or email/edition to https://antivirus.ai/newsletter-api/v1/plugin-welcome/ . Consented reports refresh weekly or on edition changes; no source/findings/customer records. Email needs confirmation; stop sharing and unsubscribe separately. Sharing privacy, email privacy.
  • WordPress.org: permitted identity/checksum/package jobs send component/version, core locale where relevant, server IP/timing. Comparison stays local; no source upload. Privacy.
  • Wordfence Intelligence: permitted/configured requests use your API credential/server connection, without source uploads. Saving a token does not enable requests. Terms, privacy.
  • Signed indicators: a configured publisher receives protocol/version metadata and server IP for permitted updates, not inventory/samples. Destination/policy appears before enabling. Bundled signatures need no download.
  • Local ClamAV: eligible bytes go to a protected host daemon; the host manages definitions, FreshClam requests and logs. Guidance.
  • Emerging Threats: permitted https://rules.emergingthreats.net/blockrules/compromised-ips.txt downloads normally run every 12 hours. Provider sees server IP/timing, not visitor IPs/content; matching is local. Licence, privacy.
  • Pwned Passwords: permitted supported checks send five SHA-1 prefix characters and server IP/timing to https://api.pwnedpasswords.com , never password/full hash/username/email. Service, privacy.
  • Exposure checks: permitted HTTPS probes contact this site’s public address. Its host/CDN sees selected paths and server IP/timing; up to 512 response bytes are compared transiently, without Antivirus.ai upload.
  • Email: selected alerts/tests send content and recipient through your WordPress mail provider. Acceptance is not confirmed delivery; interrupted/uncertain sends need review.

Logged.ai uses its public local API/route with current viewing permissions, no direct table access/off-site request. Logged.ai controls retention. Free sends no Pro/AI request; Pro services require separate consent/access and cannot approve repairs. Service privacy, terms, AI privacy.

Protect exports/recovery and handle provider records, backups and withdrawals separately. Self-service software, without managed cleanup or response-time guarantees. Support.

Source code and third-party notices

Readable source/assets are bundled. Authentication/QR builds and MIT licences: vendor/auth/NOTICE.md. Space Grotesk OFL: assets/fonts/OFL.txt. Local signature fingerprints and provenance: data/local-signatures.json; no executable specimen is shipped.