How to Detect and Remove Malware with ImunifyAV+

ImunifyAV+ is a web-based malware detection and removal application that detects and cleans malicious files from your websites such as viruses, backdoors, webshells, phishing pages, etc.

Automatic daily scans are performed for infected files on your site and we notify you immediately if any infection is found on your website. However, you can follow the guide below if you want to check your files at any time or if you want ImunifyAV+ itself to clean the files.

To use it, first we open its web-based interface. If you have a dedicated server with ImunifyAV+, we have sent you relevant connection instructions. If you have hosting with a panel (DirectAdmin), as a first step we connect to the panel by typing our domain (domainname.tld:2222) in the browser and login by entering our username and password.

There we select “ImunifyAV Plugin” from the Extra Features menu and then we are transferred to the ImunifyAV+ interface.

Starting a Scan and Viewing Results

In addition to the daily automatic scans, we can start a scan whenever we want. For this purpose, we click the “Start scanning” button to start checking all files for potential infections.

When the scan is complete, the results are displayed on our screen. In the “Malicious” tab we will see all infected files detected in our account, with Status: Infected.

Managing Infected Files

ImunifyAV+ has the ability to automatically clean infections.

Specifically, it removes only the infected part from files that have been infected, keeping the rest of their content intact. In the case of files that were installed with the infection (e.g., backdoors, malicious scripts), during cleanup it performs their complete deletion.

For each infected file we have three options:

1. File preview: Click the eye-shaped icon (👁️) on the right of the file to view its content and examine the infection.

2. Individual file cleanup: Click the broom-shaped icon (🧹) to clean a specific file.

3. Bulk cleanup: Click the green “Clean up all” button to clean all infected files simultaneously.

When we choose to clean files, the system will ask us for confirmation to proceed.

⚠️ Important note: ImunifyAV+ displays a warning message informing us that infected files will remain available for restoration for 14 days before being permanently deleted from the server.

After the cleanup is complete:

• The file’s Status changes to “Content removed”
• The broom icon is replaced with a restore icon
• By clicking the restore icon we can restore the file to its previous (infected) form