Checking for infection.
WHAT SCANNING FINDS
Known malicious code Modified core files Suspicious patterns
WHAT IT MISSES
New or heavily obfuscated code Backdoors disguised as legitimate files
WHAT IS AVAILABLE
ImunifyAV in cPanel Security plugin scanners External scanning services
HOW OFTEN
Weekly is reasonable.
After any suspected problem, immediately.
WHAT TO DO WITH FINDINGS
Do not simply delete flagged files.
Some are legitimate. Some are core files needing replacement rather than removal.
Investigate before acting.
WHAT A FALSE POSITIVE LOOKS LIKE
A legitimate plugin file flagged for a pattern.
Check before deleting.
WHAT A REAL FINDING LOOKS LIKE
Files with random names Obfuscated code Files in directories that should contain only images
IF SOMETHING IS FOUND
Follow the cleanup process properly.
Deleting the file without closing the entry point means it returns.
