Wordpress Theme/plugin malware

Yesterday I downloaded a premium theme and plugin called WP-Answers from BHW. The theme an plugin looks great because it turns a wordpress blog into a website like Yahoo! Answers. It also scrapes question and answer content from the real Yahoo! Answers that relate to the keywords you pick. Its the perfect sollution for me however I worried that it may contain malware.

This products real website is here: wp-answers.com and as you will see it costs $89 to buy. (sorry, I'm not allowed to post urls yet)

Here is the BHW thread where I got my version: blackhatworld.com/blackhat-seo/black-hat-seo-tools/276630-get-wp-answers-plugin.html
and as you will see, it enables you to download the theme and plug for free from a MediaFire account.

I obviously have no proof that this theme/plugin contains any malware but I do know there is a real risk when your not downloading from reptuable sources. Can someone here please tell me how I can check for Malware because as I said its the perfect sollution for me and I don't want to have to pay $89 for it.

Extract it local directory/folder.
Scan that directory using some anti virus, malware scanners, trojan scanners.
Or upload it by yourself to virustotal

The last thing, if you still not statisfid, check each php codes one by one.

Since you've already downloaded the file you mentioned, just upload it to virustotal.com and check whether the file is infected with malware or not.

Scan with the antivirus you've got in your computer.

infact if you actually see the post where you downloaded wp-answers from the download section, there is a virusscan report which says VT scan report 0/43 which means there are no virus / malware.

Nothing to worry because here Virus scan is mandatory for themes. OP posted VT scan for that share and it is clean. If you are not satisfied with that, you can use a plugin called
Theme Authenticity Checker

TAC stands for Theme Authenticity Checker. Currently, TAC searches the source files of every installed theme for signs of malicious code. If such code is found, TAC displays the path to the theme file, the line number, and a small snippet of the suspect code. As of v1.3 TAC also searches for and displays static links.

Click to expand...

Shared right here:

Sonat said:

Shared right here:

Click to expand...

Thanks thats great. How about plugins though? Is there something simular thats able to check plugins in this way?

I have done my own checks with VirusTotal but this is not full proof.