There was a problem loading the comments.

Malware & Security Scans in Plesk

Support Portal  »  Knowledgebase  »  Viewing Article

  Print

Step 1: Log in to Your Plesk Control Panel

Open your browser and go to:

https://yourdomain.com:8443

Enter your username and password to log in.


Step 2: Open the Security Tools Section

Once inside Plesk:

  1. Click on Websites & Domains in the left menu

  2. Under your domain, look for “ImunifyAV” or “Security Advisor”
    (If you don’t see these, your hosting provider may need to enable them)


Step 3: Run a Malware Scan (ImunifyAV)

If your hosting includes ImunifyAV (Free):

  1. Click ImunifyAV

  2. Press Start Scan

  3. Wait a few minutes — it will scan your files for viruses, backdoors, spam scripts, and malware


Step 4: Review the Scan Results

After the scan finishes, it will show:

  • Clean files

  • Suspicious files

  • Malicious files

You can:

  • View the infected files

  • Click Details to see the exact issue

  • Download a copy for manual inspection (optional)


Step 5: Remove or Fix Infected Files

  • If you’re using ImunifyAV Free, you’ll see the infected files but need to remove or fix them manually

  • If you upgrade to ImunifyAV+ (paid), you can click “Clean” and it will automatically remove malware

Manual cleanup option:

  1. Go to Files in Plesk

  2. Locate the infected file

  3. Delete or replace it with a clean version from your backup

Tip: If you don’t know what a file does, don’t delete it — ask your hosting support for help.


Additional Security Steps in Plesk

Enable Security Advisor

  1. Go to Tools & Settings > Security Advisor

  2. This will scan for:

    • Weak passwords

    • Outdated PHP versions

    • Unsafe settings

Click Fix or follow suggestions to secure your hosting account.


Turn On SSL/TLS (HTTPS)

Make sure your site uses HTTPS encryption:

  1. Go to Websites & Domains

  2. Click SSL/TLS Certificates

  3. Use a free Let’s Encrypt certificate

  4. Enable “Always use HTTPS” in Hosting Settings


When to Contact Support

If:

  • You see multiple infections

  • Your site is redirecting to spam

  • You’re locked out of your files

Contact your hosting provider’s support for professional cleanup or consider using a full security service like Sucuri or Malcare.


Share via
Did you find this article useful?  

Related Articles


Comments

Add Comment

Replying to  

CAPTCHA

On-Premise Help Desk Software by SupportPal
© Support Portal - WP Lighthost