How to Scan Your Account for Malware with Imunify360

Malware can slip into a website through an outdated plugin, a weak password or a vulnerable script — and left alone it can damage your reputation and your search rankings. VernalWeb includes Imunify360, a powerful security tool that scans for malware and helps you clean it up right from cPanel.

Run a malware scan

Log in to cPanel.
Open the Imunify360 (or Imunify) icon under the Security section.
Go to the Files tab and start a scan if one is not already running.
Imunify360 lists any files it flags as malicious or suspicious.

Clean up infected files

For flagged items you can usually:

Clean up — Imunify360 attempts to remove the malicious code while keeping the file.
Delete — remove files that are entirely malicious.
Add to ignore list — only for files you are certain are safe false positives.

Always take a backup before large clean-ups, so you can restore if a needed file is caught by mistake.

After cleaning: close the door

Removing malware is only half the job — you must fix how it got in:

Update your CMS, themes and plugins, and remove anything unused.
Change your passwords, and turn on 2FA in cPanel.
For WordPress, follow recovering a hacked WordPress site and our hardening guide.

Frequently asked questions

How often should I scan?

Imunify360 scans continuously in the background, but running a manual scan after any suspicious activity is a smart habit.

Imunify found malware but cannot clean a file.

Some files are safest deleted and reinstalled from a clean source. If you are unsure, open a ticket and we will help.

My site was flagged by Google as harmful.

Clean the malware, then request a review in Google Search Console. Fixing the root cause first prevents it coming straight back.