Scanning cP server for Malware & Viruses

Learn how to scan and protect your cPanel server for Malware and Viruses. An effective tutorial guide for any learners.

To protect your server from viruses and malware, or if you believe there are scripts on your server already we recommend doing the following

Install ClamAV

Login to WHM

Go To Home >> cPanel >> Manage Plugins

Click on 'Install and keep updated' next to ClamAV

WHM will then download the necessary packages for clamavconnector and will install it automatically,  this may take a few minutes.

Once the installation has been completed, you will have a virus scan link in your cPanel interface.

Install Maldet

Maldet is a malware scanner, it is a good idea to regularly scan your server for Malware. You should ensure ClamAV is installed before installing Maldet.

First login to your server via SSH as root

Enter the following commands:

wget http://www.rfxn.com/downloads/maldetect-current.tar.gz
tar
-xzvf maldetect-current.tar.gz
cd maldetect
-*
sh install
.sh
pico /usr/local/maldetect/conf.maldet

In the conf.maldet file you are  now editing set the alert email address to your email, you may also wish to quarantine problem files.

To run the maldet scan type:

maldet --scan-all /home?/?/public_html
or
maldet
--scan-all ./
  • 0 användare blev hjälpta av detta svar
Hjälpte svaret dig?

Relaterade artiklar

I want to buy one dedicated IP and make it shared

If you are a reseller who wants to buy a single dedicated IP address, then assign it to all...

I upgraded the bandwidth or disk space limit on my packages. Why aren't my sites updating?

I edited a hosting package. Why aren't my sites showing up with the new stats? Whenever you...

How to reset a reseller client's password

Instead of reading this, you can watch the movie tutorial. Go to WHM and click Password...

Do you have a manual for our reseller panel?

Yes Go to http://www.cpanel.net/docs/whm/ to view the documentation for Web Host Manager...

How can my clients view their site before the DNS has propagated?

They can go to: http://youriphere/~theirusernamehere/ The IP and user name assigned to a domain...