Get Off Those Maliciously Loaded Scripts!
Download this free Anti-Malware Plugin for WordPress.

Donate!

This Plugin is FREE for anyone to download and use on as many sites as they want. Contributions are encouraged to support the continued maintenance and improvement of the Plugin and the Malware definitions. The more support I get, the more time I can devote to making this malware solution more comprehensive, effective, efficient, and informative, and the more you benefit.

Thank you for your Support!

Contribute $29 with Credit Card

Stripe Payment

Contribute $29 with PayPal

Thank you for your support!

Below is a list of what I plan to do with your contributions. Many of these idea's were requested by users and I am more than happy to hear about any ideas you may have. So hear they are, in no particular order:

• Add a scheduling agent so that you can setup regular scan at set intervals and receive an email report if threats are found.
• Add an easy way for you to report a specific file to me for closer examination when you find some malicious code that my plugin missed.
• Make registration optional so you can download the definition updates without registering the plugin.
• Add a JavaScript method to the login patch for when the session method is not available.
• Create a list of professionals who are available for hire to remove malware if extra help is needed.
• Check for new files that don't belong when running the Core Files Check to remove files that have been added to the wp-includes or wp-admin.
• Create a non-WordPress-wrapper or CLI for people with infections on a non-WordPress site or for when your WordPress admin is not working.
• Update the definitions of Known Threats as new malicious threats are discovered.

I will update this list when I hear your thoughts and suggestions too.

Here are a few of the major updates I was able to complete in the with past donations:

• Added a Database scan to find and remove any malicious code injected directly into your content.
• Added a Core Files Check to scan for any changes to WordPress files and restore them if any are found.
• Added the ability to change the admin username if the current username is "admin".
• Moved the quarantine files into the database and deleted the old directory in uploads.

Aloha and Mahalo,

Testimonials

• Just wanted to stop by and let people know Eli is the real deal. I own and operate Reviewboard Magazine (Reviewboard.com) and we are in a weird spot in the food chain when it comes to product reviews. Because we do reviews on just about everything consumer related we fall into the mainstream consumer publication category of which we are actually the 2nd most popular in the United States. Go figure. We ended up getting a web STD and google crippled our website by putting up the malware stop page and listing our website as a malware site. Our advertising was stopped (Adsense) and things came to a crashing halt.
  
  NO ONE knew how to fix this situation properly and we tried. I posted here and ELI responded within a few hours. I trusted him and gave him admin access to our website and he did not disappoint. This man is a saint. He fixed the issue I was having with his plugin, he removed all the malware issues, and we were able to submit a request for review with google... it was successful and we are now back in action.
  
  Without Eli we would have had to rebuild our web server VMs, our database VMs and cut, copy and paste every article we had to make sure we didn't have any malware. This would have taken a month and hurt us badly. I can't tell you how grateful I am to Eli and his plugin. We are forever in his debt. If you haven't donated for this plugin, you should really go do that now. His time is worth every cent, and we will be donating regularly to help his efforts here.
  -- Review Crew
  
  

341 Comments on "Donate!"

• 
  On February 20, 2025 at 1:15 pm, Leonardo Gomez said:

  hello i want to know 3 things:
  1. if i make a donation, all the sites that i install with the free version i have to do something else or automatically the plugin is configured?
  2. what are the differences when making a donation compared to the free version?
  3. the brute force protection option comes up with an error, (Your server could not login!) is this because i am using the free version?
  pd: do you have support in spanish?

  Reply
  • 
    On February 21, 2025 at 4:49 am, Anti-Malware Admin said:

    I am sorry but it's just me for support and I don't speak Spanish.

    One donation will unlock all the current premium features on all the sites that you have registered under the same account, so please be sure to use the same email address when registering each site so that they are all on the same account.

    The premium features include automatic updates which will install the core file definitions once enabled, and also the Brute-Force Login Protection, however the error message you are getting will still prevent you form using this login protection even after your donation. So, you will still need to address the issues on your server that are causing the login protection to fail.

    There are two errors that you might get that would prevent you from enabling the Brute-Force Login Protection:
    If you see "Your Server could not start a Session!" that means that a persistent session could not be established on the server, and you should check the "session.save_path" value in your php.ini file and make sure that the path is writable by the web-server user.
    Alternatively, you might have gotten the error "No response from server!", which means that the server did not respond to the ajax script requested to check for a valid session. You may need to check your error_log files on the server to see why that call to the admin-ajax.php file failed.

    Either of those error will require a better understanding of your server configuration and the ability to troubleshoot configuration issues on the server. You may need your hosting provider to help you diagnose this cause of these issues and find a solution. I am will to help you troubleshoot the issue further but I will need more information from you or your hosting support team or direct access to your server to troubleshoot the issue myself.

    Please let me know if you need any further assistance. You can email me directly with any info that might be too sensitive to post online.

    Reply
• 
  On February 11, 2025 at 7:23 am, Jerald Dawson said:

  Love this plugin and install it on every one of my wordpress sites.

  Reply
• 
  On December 2, 2024 at 7:44 am, Nek Pav said:

  Just donated because its something worth keep on going!

  One of the best plugins out there!

  Keep on the good job Eli!

  Reply
• 
  On October 17, 2024 at 3:26 am, Centaurus Junior said:

  O acesso ao meu site está apresentando mensagem de Site Perigoso, em todos os navegadores, passei a varredura do plugin e ele não encontrou nada, tenho que doar para que ele consiga fazer a limpeza? (tenho a intenção de fazer a doação, minha pergunta é somente para saber se isso é imprescindivel)

  Reply
  • 
    On October 17, 2024 at 9:30 am, Anti-Malware Admin said:

    Desculpe pela tradução do Google, mas não falo português.

    Fazer uma doação não é essencial para a funcionalidade do meu plugin, mas ajuda o projeto a se manter ativo e atualizado.

    Você precisa se registrar para baixar as atualizações de definição mais recentes. As definições mais recentes são essenciais para a verificação encontrar as ameaças mais recentes.

    Certifique-se também de estar executando a verificação completa em todo o site e não apenas no diretório do plugin.

    Sorry for the Google Translation, but I don't speak Portuguese

    It is not essential to the functionality of my plugin to make a donation, but it does help the project stay active and current.

    You do need to register to download the latest definition updates though. The latest defintions are essential to the scan finding the latest threats.

    Also make sure that you are running the Complete Scan on your whole site and not just on the plugin directory.

    Reply
    • 
      On November 2, 2024 at 8:02 am, Adeise Marcondes said:

      Hi Eli, how are you?

      I don't speak English, sorry for the Google Translate, but how do I run a full scan on the entire site and not just the plugin directory?
      Which path should I follow to run a full scan?
      Thank you,

      Reply
      • 
        On November 3, 2024 at 8:43 am, Anti-Malware Admin said:

        The second option on the Anti-malware Settings page is "What to scan:" and it might be set to "plugins". You change it to the selection above that "wp-content" to scan one folder higher, or even the top selection which should be your site's root directory (depending on your server's directory structure this top folder might be called "public_html" or "htdocs" or something like that). If that top option is selected then the Complete Scan will scan all the folders on your website and all the sub-directories too.

        Reply
• 
  On June 3, 2024 at 9:05 am, Ernest Riva said:

  I had to intervene on 4 sites in 3 days hosted a well-known webhosting, and Anti Malware plugin saved me so much time in locating the compromised files. Spport the developer, he does a laudable job.

  Reply
• 
  On January 13, 2024 at 9:59 am, Met Mus said:

  If i donate, can i use the Pro version on multiple websites, or do i have to pay for each of them?

  Reply
  • 
    On January 18, 2024 at 5:12 am, Anti-Malware Admin said:

    If you register all your websites under the same email address then they will all be on the same account and a single donation will unlock the current premium feature on all of them

    Reply
    • 
      On March 15, 2024 at 6:45 am, Aris said:

      Is it single donation can be use for as many websites or 29$ for a single domain?

      Reply
      • 
        On March 15, 2024 at 7:36 am, Anti-Malware Admin said:

        If you use the same email address to register all your websites under the one account then you need only donate once to unlock the current premium features on all of them.

        Reply
    • 
      On October 30, 2024 at 4:33 pm, David Carlisle said:

      Fantastic!
      All other WP malware scanners that I've tried (which don't seem to be as effective…) charge per site for their "premium" versions.
      Thank you for your great work. The only thing that would be better is if it could run automatically on a schedule – which I've seen you're working on?

      Reply
      • 
        On November 3, 2024 at 9:03 am, Anti-Malware Admin said:

        Yes, I am still working on that new feature to schedule automatic scans. I am currently testing this as a stand-alone service and will open that service up to BETA testers early next year. After it is stable and secure enough to be put into this plugin I will be working on a fully integrated solution.

        Reply
• 
  On January 3, 2024 at 3:47 pm, Jose Zeballos said:

  Hola, vuelvo a consultar. el pluguin hizo el escaneo y detectó varios virus, pero cómo sé que los eliminó. Vuelvo a escanear y sigue mostrando los virus. Para su eliminación debo hacer el pago?
  Gracias.

  Reply
  • 
    On January 4, 2024 at 4:00 am, Anti-Malware Admin said:

    When the scan finds Known Threats they will be listed in Red. Once you click the Automatic Fix button it should tell you that those infections were fixed and then the files listed should turn Green. You can then check the Anti-Malware Quarantine page to see all the infections that have already been fix and those will be listed in Yellow, indicating that they were infected before but are now safe. If those files listed in the Quarantine are listed in Red then they have been reinfected and will need to be re-cleaned again (this also indicates that you have a persistent breech that is using and active exploit which still needs to be patched.

    Cuando el análisis encuentre amenazas conocidas, aparecerán en rojo. Una vez que haga clic en el botón Reparación automática, debería indicarle que esas infecciones se solucionaron y luego los archivos enumerados deberían volverse verdes. Luego puede consultar la página de Cuarentena antimalware para ver todas las infecciones que ya se han corregido y que aparecerán en amarillo, lo que indica que estuvieron infectadas antes pero que ahora están a salvo. Si los archivos incluidos en la cuarentena aparecen en rojo, entonces se han reinfectado y será necesario volver a limpiarlos (esto también indica que tiene una breech persistente que está utilizando un exploit activo que aún necesita ser parcheado).

    Reply
• 
  On October 4, 2023 at 3:16 am, Jessica Reilley said:

  I have been using this plugin for years and it continues to be a time saver and huge help to my business and clients! I have peace of mind that this plugin will find and quarantine any malicious code, helping my clients' sites stay clean. Thank you for all of your hard work!

  Reply
• 
  On August 14, 2023 at 4:15 am, pepe laalfa said:

  Donacion efectuada y escaneando web, se puede usar en más de una web la misma cuenta? Gracias

  Reply
  • 
    On August 14, 2023 at 4:38 am, Anti-Malware Admin said:

    Sí, simplemente registre cada sitio/clave con la misma dirección de correo electrónico y todos estarán en la misma cuenta.

    Reply
• 
  On August 10, 2023 at 7:59 pm, Usman Habib said:

  Hello, I have donated via paypal but no activation yet. Please confirm.

  Reply
  • 
    On August 11, 2023 at 1:48 am, Anti-Malware Admin said:

    I see that you have donated through PayPal using an eCheck, this is the only method that does not give an instant payment notification because it can take a few days for the check to clear. Once the eCheck has cleared your bank and PayPal releases the funds then my site will receive the IPN and your account will be marked as Paid.

    Reply
• 
  On July 10, 2023 at 4:09 pm, Leonardo Gomez said:

  hi i want to know if this plugin does the job of protection as wordfence or iThemes Security does and with the donation i am entitled to? thanks.

  Reply
  • 
    On July 17, 2023 at 3:53 am, Anti-Malware Admin said:

    No two security plugins are alike. My plugin has built in firewall features, as do the others you mentioned, but each of these firewall works in a different way to discern and dissuade the most common attacks, hopefully without preventing normal visitors from viewing your site. To ascertain how good of a job each plugin does at achieving this goal I suggest you look at the user reviews. I personally look at the 1-Star reviews to see what the biggest complaints are.

    As for making a donation to my project, the premium features include automatic updates which ensures that you have the latest definition installed, and the core file definitions helps with the scan speed and can also find new threats in core files that might not have otherwise been identified as malware.

    Reply
• 
  On June 27, 2023 at 4:53 am, Venera Tech said:

  info@veneratech.com

  regiatered and donation done. No activation.

  Reply
  • 
    On June 27, 2023 at 8:01 am, Anti-Malware Admin said:

    I replied to your forum post, here is what I said, I see your registration on my end so there are two likely possibilities here: either your wp-admin page has been cached and you are not seeing the live results that reflect your registration; or else you might have two or more URLs, only some of which are registered (e.g. http://veneratech.com , http://www.veneratech.com , https://veneratech.com , https://www.veneratech.com ).

    If the former just clear you cache and refresh your wp-admin page. If the latter, then simply register any additional URLs under the same email address so that they are all on the same account.

    Please email me directly with a screenshot if you need further assistance.

    Reply
• 
  On June 20, 2023 at 4:40 am, Nick baker said:

  Hi, I want to get paid version for my shared hosting websites….I will donate some amount…Can you help to buy it?

  Reply
  • 
    On June 20, 2023 at 5:33 am, Anti-Malware Admin said:

    I don't see any registrations or donations from you yet, but I look forward to joining the family

    You can also register Free Key automatically generated for your site and use the plugin without making a donation if you cannot afford to right now.

    Reply
• 
  On May 11, 2023 at 8:41 pm, Gregor Wimmer said:

  Hi – I just made a donation via PayPal.
  1. How can I activate this in the PlugIn? It doesn't show I donated.
  2. Where and how can I download the Receipt for it?
  Thanks in advance for answering my questions.

  Reply
  • 
    On May 12, 2023 at 3:38 am, Anti-Malware Admin said:

    Your donation was automatically associated with your account based on the key that you already registered to your domain. You can view the receipt for your donation when you login to the member page at https://gotmls.net/members/

    You should also see your donation reflected on the Anti-Malware Settings page of your own wp-admin, you may need to clear your cache before your can fully refresh that page depending on your browser and what caching plugins you have on your site.

    Reply
• 
  On April 16, 2023 at 5:01 pm, Matt said:

  Can't say how grateful I am for Eli and his plugin. Helped me immensely and great customer service.

  Reply
• 
  On January 24, 2023 at 6:55 pm, Mike White said:

  first plugin i have ever donated to. this is great work. bravo!

  Reply
• 
  On October 21, 2022 at 12:35 am, Pikkabbu said:

  Thank you for this good job. My site is now clean. Happy to contribute, you worth it.

  Reply
• 
  On December 27, 2021 at 2:47 pm, Grace Fellowship said:

  I made a donation, but it doesn't seem to be connected to my account.

  Reply
  • 
    On December 28, 2021 at 7:16 am, Anti-Malware Admin said:

    You registered your site twice, once using your unsecured URL (HTTP) and once using secured URL (HTTPS), each one under a different email address so they are on different account, and only one of those accounts has a donation. Try re-registering one of your URLs using the other email address so that they are both on the same account.

    Reply
• 
  On October 27, 2021 at 12:37 pm, Onur said:

  hey ; Unfortunately PayPal is not available in Turkey. The Turkish government revoked PayPal's license for failing to transfer its data to Turkey.

  Can you give me your bitcoin address I want to send donations.

  Reply
  • 
    On October 27, 2021 at 2:20 pm, Anti-Malware Admin said:

    There is a bitcoin option using Coinbase Commerce on this donation page as well as PayPal and also a credit card option using Stripe.

    Reply
• 
  On September 23, 2021 at 9:27 am, studiovelika.com said:

  hi! how i can donate from Argentina? your work it's exellent.

  Reply
  • 
    On September 24, 2021 at 3:47 am, Anti-Malware Admin said:

    You should be able to use PayPal for international transactions but if that does not work for you then there is also a credit card for on my Donate page that uses Stripe to process the transaction. You can also send Bitcoin if that is preferable to you.

    Reply
• 
  On September 1, 2021 at 9:32 pm, wilden said:

  Hey, I want to enable "Brute-force Protection" in the plugin but it says "(This patch only works under Apache servers and requires mod_rewrite and session_start to be active and functional)"

  So how can I find out if I'm under Apache server? Or how can I know it will work for me? I'm using WordPress. Thanks

  Reply
  • 
    On September 5, 2021 at 4:01 am, Anti-Malware Admin said:

    It should show your Apache version in the upper-right corner of the Anti-Malware Settings page in your wp-admin, just below your PHP version and above your WordPress version (unless you are running nginx or something else it will say Apache there). Compatibility is automatically checked when the Firewall Settings page is loaded so if it does not work with your system then you will not be able to click the "Install Patch" button.

    Reply
• 
  On August 13, 2021 at 8:42 am, Ketharaman Swaminathan said:

  Great plugin! My blogsite was getting repeatedly infected. I paid $$$ to a self-proclaimed WordPress dev shop to get it cleaned. They took my money and claimed to have cleaned up my site but it got reinfected within hours after reinstallation. I then stumbled upon GOTMLS. I ran the plugin. It worked as advertised. 10 days later, my site is still free of infection (knock on wood!). Another thing I love about Eli S is the empathy and clarity in his communications. Anyone who is looking for a solution to a malware problem is not out on a walk in the park, to put it mildly. Unlike the brush-off tone used by many IT folks, Eli's comments totally speak to the user's state of mind.

  Reply
• 
  On August 5, 2021 at 4:30 am, PIMARICINA INDUKERN said:

  Acabo de donar 29 $. Voy a probar que tal va esperando me solucione la infección.

  Reply
  • 
    On August 5, 2021 at 4:51 am, Anti-Malware Admin said:

    Thank you for your donation. What is the problem you are having?
    Please send me a screenshot if you need more help.

    Reply
• 
  On July 10, 2021 at 12:36 am, Carlos Garreta said:

  I found it fantastic!!! It cleaned completely my site, from malicious files and database injection. I'm delighted that I was able to contribute $ 29 so you can keep improving. I'm sure I will continue to contribute. Thanks for your excellent work.

  Reply
• 
  On July 6, 2021 at 10:03 am, jakub said:

  great module, i will donate!

  Reply
• 
  On April 26, 2021 at 3:36 pm, SHIGEJI WADA said:

  This plugin is very nice.

  I was able to get rid of the malware on the site

  Thank you

  Reply
• 
  On February 19, 2021 at 5:09 pm, Felicia said:

  This plugin works! I had malware on my website. Looked at a ton of different options. Just needed something NOW to solve my problem. This plugin did the trick. I immediately donated $29 after it cleaned my site. Great job!

  Reply
• 
  On February 5, 2021 at 7:35 pm, searchenginepro said:

  Thanks a great plugin.

  Reply
• 
  On January 25, 2021 at 8:03 am, hussain niyaz said:

  thanks, work fine

  Reply
• 
  On November 9, 2020 at 7:29 am, Derek Harris said:

  Hi Can you tell me how far you are with the list for adding features?

  Reply
  • 
    On November 9, 2020 at 3:40 pm, Anti-Malware Admin said:

    I am mainly working on getting some sort of scheduled scan feature to be available in the near future but this has proven to be a much bigger undertaking than I expected and there are still a few key pieces of the scan process that will need to be completely rewritten before and schedule scan process will be possible. Was there something specific that you were interested in?

    Reply
• 
  On November 4, 2020 at 1:02 am, Aslıhan Kaymaz said:

  Very usefull plugin. Thanks

  Reply
• 
  On November 3, 2020 at 7:35 am, Marie Laure Mores said:

  J'ai découvert ce logiciel de nettoyage sur google.
  Suite à un message qui disait que mon site était en danger.
  Je l'ai aussitôt installé et procédé au nettoyage.
  Merci pour ton travail qui sauve nos sites.

  Reply