ImunifyAV in cPanel scans your entire hosting account, independently of anything installed inside your website.
RUNNING A SCAN
- cPanel > ImunifyAV under Security.
- Click Start Scanning and scan the full home directory.
- Wait. Large accounts take several minutes.
- Review the Malicious tab.
READING RESULTS
Each detection shows the file path and the signature matched. Typical findings are obfuscated PHP in theme files, unknown PHP inside uploads folders, and modified core files.
ACTING ON DETECTIONS
- Core application files: do not edit them. Replace with fresh copies from the official source.
- Plugin or theme files: delete the extension entirely and reinstall from a legitimate source.
- Unknown PHP in an uploads folder: safe to delete.
- Anything you are unsure about: open a ticket before deleting. Removing the wrong file takes the site offline.
Download a backup before deleting anything. False positives do occur, particularly with heavily obfuscated or licence-protected premium plugins.
A SECOND OPINION
Install a scanner inside the application as well, such as Wordfence for WordPress, which compares core files against the official repository. Two different scanners catch different things.
