=== Plugin Name === Contributors: Nick Ohrn for Orangecast Social Media Donate link: http://how-to-blog.tv/security/wp-malwatch Tags: security, security scan, malware scanner, scanner Requires at least: 2.9.0 Tested up to: 2.9.1 Stable tag: 1.0.2 WP-MalWatch performs a nightly security scan of your blog looking for evidence of malware. == Description == When hackers infiltrate a blog, the first thing they do is plant .PHP and .HTACCESS files in various directores, embed Encode64 strings in your core WordPress files, and litter your theme with links to their sites. WP-MalWatch performs a security scan of your WordPress installation nightly looking for evidence of foul play and if WP-MalWatch finds it, a dashboard widget will tell you were you should take a closer look. Version 1.0.2 of WP-MalWatch is limited to a security scan of the wp-content/uploads directory for PHP files. Why? Because they shouldn't be there and are clear evidence of foul play. In future versions of the WP-MalWatch will scan for Encode64 strings, .HTACCESS files, and hidden links. WP-MalWatch Features: * Automated nightly scans with the option to manually invoke. * Efficient detection of PHP files in your Uploads directory. * Symbolic link friendly file scanning. * Dashboard widget for easy notification * A very well written, modularized plugin architecture for future expansion. == Installation == WP-MalWare's installation is fairly straight forward. 1. Upload the 'wp-malware folder' to the `/wp-content/plugins/` directory 1. Activate the plugin through the 'Plugins' menu in WordPress If you receive an error upon activation, it is likely because you ARE NOT running PHP5. PHP4 IS NOT supported! == Frequently Asked Questions == = What should I do if WP-Malware finds evidence that my site has been hacked? = Manually look at the directories that WP-MalWare marks as suspect. If you find direct evidence that something is not right (e.g. - PHP files in the uploads directory structure), you will want to engage a professional who is knowledgeable of WordPress and restoring an installation or locating/eliminating malware. Visit our plugin home page for the most up to date information regarding malware blocking software and service professionals. = How Can I prevent malware in my WordPress installation? = Several software vendors create monitoring, blocking, and prevention services for WordPress We maintain a full list of security resources and products on