Skip to content
OrbixPanel OrbixPanel Tutorials

Scan your sites for malware

Public web apps — especially WordPress with lots of plugins — are a common target. OrbixPanel includes a malware scanner (powered by ClamAV) so you can check your files on demand.

Run a scan

  1. Open the Malware Scanner in the panel.
  2. Choose a directory to scan — a specific site’s folder, or your whole web root.
  3. Start the scan.

When it finishes you’ll see how many files were scanned and a list of anything infected, with the matched signature. Infected files can be quarantined (moved somewhere isolated) so they stop running while you investigate.

If something is found

  1. Don’t panic, don’t delete blindly. Quarantine first.
  2. Identify the entry point — usually an outdated plugin/theme or a weak password. Check file modification dates near the infection.
  3. Clean or restore. For WordPress, reinstall core and the affected plugins/themes from scratch, or restore from a known-good backup.
  4. Rotate credentials — admin passwords, database passwords, API keys.
  5. Patch what let them in, then rescan to confirm it’s clean.

Prevent the next one

  • Keep everything updated — watch security advisories.
  • Use 2FA and strong passwords.
  • Remove plugins/themes you don’t use.
  • Close ports you don’t need with the firewall.
  • Scan on a regular schedule, not just after something looks wrong.

Running OrbixPanel? The malware scanner is built in. OrbixPanel.com → — the free, self-hosted, AI-powered hosting control panel.