The following are recommendations on how to check and clean the site from viruses.
If you have detected a suspicious code on your website, or if you have received an infection notification from our antivirus system. Don't ignore the notification, make sure you check your site for viruses!
How do I quickly run a virus scan?
You can run an anti-virus check yourself in the hosting control panel in the Anti-virus section.
After the check, a file with the name of your domain "DOMEN_antivirus.log" will be placed in the root of your account. This file will show the path to the site files which may contain the virus.
*** Attention! Checking for viruses in the hosting control panel, does not find all possible viruses, we recommend you to use a detailed check with the program https://revisium.com/ai/, as recommended in option 2 (see below). ***
Check the files on the list of possible infections for foreign code:
If the files on the list are possibly infected - you haven't found any suspicious code, then everything is fine. The antivirus system can make mistakes, especially if the file is encrypted.
If there is extraneous code in the files - not related to your files/code. Or the file is different from the source file from your engine script archive. - This means the site is most likely compromised and infected, follow the recommendations below!
How could the site be infected?
- Infection sites often occurs through vulnerabilities in the site engine, modules, plugins or templates;
- The site can easily get infected if you use an easy password to access the admin panel of the engine site (easy password can be chosen);
- If a computer that uses access to the hosting has a virus infection, it is likely to spread to the site to which the computer connects via FTP access
If foreign code is found on the website?
There are several options to remove the infestation:
Option 1 (easy) if there is no infection in the backups:
Check the control panel under Hosting backups - old backups, for different creation dates. If the site has not been infected before, old backups will have uninfected site files.
Check old backups carefully if the site has not been infected yet:
a) Make a full backup of the current account status in the control panel https://hostia.net/directadmin_new/kak_sozdat_backup.html wait for its full creation.
b) Remove all the files of the infected site completely from your hosting (after making the backup).
c) Recover the old backup of the files from the time when there was no infection.
d) Recover the missing images files and other files from the infected backup (make sure that the files you recover are not infected).
After restore from backup:
a) Make sure there are no more infections and allow dangerous functions in the control panel of hosting in the Antivirus section.
b) ! Be sure to update the engine (cms) to the latest version from the site developer (if you do not close the vulnerabilities, the site will be infected again);
c) Check your computer for viruses;
d) Change all passwords to the engine (cms) and hosting account;
option 2 (if the site in backups is infected too):
Download the site files to your computer and check for viruses using for example the program https://revisium.com/ai/ remove all infections.
But chances are not all infections will be removed using this method.
On the internet, there are many recommendations on how to clear viruses from a website.
After cleaning site files from viruses:
a) Make sure there are no more infections and enable Dangerous Features, in the Control Panel of hosting in the Antivirus section.
b) Make sure you update the engine (cms) to the latest version from the developer's site (if you don't close the vulnerabilities, the site will be infected again);
c) Check your computer for viruses;
d) Change all passwords to the engine (cms) and the hosting account;
If you don't implement the recommendations, what happens?
Otherwise, viruses may be spread through your site, illegal files may be posted, spam may be sent, and your site visitors may be infected. It is necessary to check and clean the site from viruses, for such unauthorized actions your site can be blocked.
Get fast hosting with high-quality support. Use our bonuses, like free domain, free SSL, and others.
Not registered?
New account registration
0 + customers have chosen Hostia.Net
