How to Run an Imunify360 Malware Scan in cPanel

Every Hostinap server is protected by Imunify360, a comprehensive AI-powered security suite that actively blocks brute-force attacks and scans for malware in real-time. If you suspect your WordPress site has been compromised, or if Google has flagged your site for malicious software, you can manually run a deep scan and clean infected files with just a few clicks.

Step 1: Open Imunify360 in cPanel

Log in to your cPanel dashboard. Scroll down to the Security section and click on the Imunify360 icon. This opens your personal security dashboard.

Step 2: Review the Dashboard

When you open Imunify360, you will be on the Files tab. If the real-time scanner has already detected malware, it will be listed here. You will see the infected file's path, the reason it was flagged (e.g., SMW-INJ-...), and its current status.

Step 3: Run a Manual Scan

Even if the dashboard is empty, you can force a fresh deep scan of your entire account.

1. Click the Start Scan (or "Scan All") button on the right side of the screen.
2. Imunify360 will begin analyzing every file in your account. This process can take anywhere from 5 minutes to an hour depending on how many files you have. You do not need to keep the window open.

Step 4: Clean Infected Files

If Imunify360 finds malware, it usually quarantines or cleans it automatically. If it requires manual intervention, you have several options next to the infected file:

• Clean up (Broom icon): Imunify360 will attempt to surgically remove the malicious code snippet from the file without breaking the legitimate code around it. (Highly Recommended)
• Restore from backup (Clock icon): Replaces the infected file with a clean version from a recent backup.
• Delete (Trash icon): Deletes the file entirely. (Only use this if you are certain the file is pure malware and not a legitimate WordPress file).
• Ignore (Eye with slash): Tells Imunify360 this is a false positive and to ignore it in the future.

Proactive Security Settings

Click on the Settings tab (the gear icon) in Imunify360. Ensure that Default action on detect is set to Clean up. This ensures that if malware is uploaded while you are asleep, Imunify360 neutralizes it immediately without waiting for your permission.