Scan your site for malware
Run an on-demand Imunify360 malware scan from cPanel, read the results, and what to do about files it flags.
Scan a hosting account for malware on demand. Applies to shared and reseller hosting, at no additional cost.
Imunify360 already scans continuously in the background across all WebGee servers. This is for when you want to check a specific account now — after a suspected compromise, or before handing a site over.
Run a scan
-
In cPanel, open Imunify360 under Security.
-
Select Start scanning.
The scan is queued and runs through the account's files. Large accounts take a while; you can leave the page.
Read the results
Anything found appears under Malicious, listing the file path and the detected signature.
For each result you can:
- Clean up — Imunify360 attempts to remove the malicious code and keep the file.
- Delete — remove the file entirely.
- Add to ignore list — for a false positive.
Take a backup before cleaning or deleting anything. Cleanup modifies files in place, and a false positive on a legitimate file can break your site. See Take a snapshot backup.
Cleaning is not the whole job
Removing the malicious files does not close the hole they came through. If a scan finds anything, assume the site was compromised through an outdated plugin, theme or password and deal with that too — otherwise it returns within days.
Work through Clean malware from your website, which covers the rest: updating everything, rotating passwords, and checking for files and admin users the attacker left behind.
If the site is flagged by Google
A clean scan is not enough on its own — Google keeps showing the warning until it re-checks. See Request a Google review of a compromised site.