AMWScan Antimalware Scanner Lite

AMWScan Antimalware Scanner Lite is the WordPress.org distribution of the free AMWScan PHP antimalware engine for WordPress administration. It is packaged independently from the Full GitHub edition and contains no browser file editor or quarantined-file restoration code. Install only one edition at a time.

Features include default-on upload protection, manual and precisely scheduled background scans with live checked-file progress and scan-rate remaining time, security finding alerts, resumable progress, canonical malware, integrity, and reputation findings, lifecycle exceptions, opt-in bounded ZIP scanning, a WordPress admin dashboard widget, local folder browsing, read-only FTP/FTPS sources, responsive reports, whitelist and quarantine management, backups, automatic fixes, and an About page with documentation and project credits.

Report-only scanning is enabled by default. Reports list integrity, vulnerability, and reputation checks under Security findings, while code and signature matches appear once under Malware detections and remain collapsed until opened. File-changing remediation actions require explicit confirmation. Responsibility and backup warnings appear when automatic actions are enabled or saved and before report remediation and quarantine deletion. Quarantined files cannot be restored through the plugin. Access is limited to administrators with the manage_options capability.

Bounded ZIP content scanning is disabled by default for manual and scheduled scans. It requires the PHP ZIP extension and can be enabled under Antimalware > Settings > Scope and limits. Large or highly compressed archives can increase scan time and resource usage, and entries beyond the safety limits are reported as incomplete coverage.

Upload protection scans media and plugin or theme ZIP files before WordPress accepts them. Detected files and uploads that cannot be scanned completely are blocked, and the scan report is retained for review. ZIP inspection requires the PHP ZIP extension. Administrators can disable upload protection under Antimalware > Settings > Scan policy.

Open Antimalware > About for installed plugin and engine versions, documentation, support, contribution guidance, licensing, and contributor credits.

English is the source and fallback language. The plugin includes a translation template for Italian, German, French, Spanish, Russian, Chinese, Japanese, Hindi, and Arabic. Arabic and other right-to-left locales use a dedicated mirrored admin layout while keeping technical values such as file paths and hashes left-to-right.

The plugin always follows the WordPress site language. WordPress loads a matching language pack when available; otherwise, untranslated English source strings remain visible.