Yuga AntiMalware

Description

Yuga AntiMalware is an admin-focused plugin built to detect suspicious malware indicators and support remediation workflows on WordPress sites.

Main capabilities:
– Tabbed admin interface with left sidebar sections and right helper column.
– Scan modes:
– Quick scan (files in wp-content)
– Targeted scan (plugins/themes/mu-plugins/uploads/root files)
– Database scan
– Frontend scan
– Full scan (files + database + frontend)
– Optional PHP max_execution_time override for scan execution.
– Background scan execution with runtime status polling.
– Automatic quick scans through WP-Cron (hourly, daily, or weekly).
– Findings table with sorting, grouping, and file preview.
– Findings actions: ignore, exclude path, quarantine, delete, copy path.
– Reinfection Trace with database hot spots and writer candidates.
– Writer Hunt for file-level suspect correlation.
– Safe options cleanup workflow: backup + cleanup + restore rollback.
– Content Cleanup for suspicious post/page/revision rows with filters by author, category, type, language/script, and keyword.
– Content cleanup actions with rollback backups, batch-based filtered trashing, and previous revision restore for posts/pages.
– Trash Cleanup for permanently removing WordPress trash items in backed-up batches.
– Cache cleanup tools (targeted suspicious cache cleanup and full transient flush).
– Post-hack plugin/theme inventory with version checks and maintenance actions where supported.
– Quarantine inventory viewer in admin.
– Retention policy for quarantined files, applied from quarantine timestamp.
– Email notifications via default WordPress mail settings.

External Services

This plugin optionally integrates with PayPal Donate to facilitate donations. No PayPal resource is loaded until an administrator explicitly clicks the “Donate with PayPal” button on the plugin settings page.

• Service Name: PayPal Donate API
• Purpose: To provide a donation button through PayPal.
• Data Sent:
  • Network and device information normally included in web requests, such as IP address and user agent
  • The hosted PayPal button identifier
  • Any payment information the administrator subsequently enters on PayPal
• When: The PayPal SDK is requested only after an administrator clicks the “Donate with PayPal” button.
• Service Links:
  • PayPal Terms of Service
  • PayPal Privacy Policy

Payment transactions are handled by PayPal under its own terms and privacy policy.

How to use Content Cleanup safely

1. Run a Database scan or Full scan first.
2. Open Dashboard > Content Cleanup and review the filtered suspicious post rows.
3. Use filters such as Author, Category, Type, Language/script, and Keyword to narrow the result set.
4. Prefer backup-backed actions before trashing content.
5. For real posts or pages that were modified, use Restore previous revision when a clean revision is available.
6. For suspicious revisions, move them to trash after verifying they are not needed.
7. Use Trash Cleanup only after confirming the trashed content should be permanently removed.